[j-nsp] filter to count http requests

[tchoel .]

hi,

no infact, there is a large network connected to the upstream via filtered 
interface. I couldn't be able to unserstand why I can not count the network 
total request. I'm not an expert on tcp processes. I know that browsers 
utilize several (4 ?) tcp sessions to retrieve the requested url. Is that 
the reason filter fails for a network? Can you refer to me any source of 
information for that ?
Thanks for your time.

Regards,
tchoel





>From: German Martinez <gmartine@mafalda.opentransit.net>
>To: "tchoel ." <tchoel@hotmail.com>
>CC: <juniper-nsp@puck.nether.net>
>Subject: Re: [j-nsp] filter to count http requests
>Date: Mon, 18 Nov 2002 11:24:23 -0500 (EST)
>
>If there is just one host connected you you uplink, that filter will help
>you counting what you are looking for.
>
>Thanks
>german
>
>
>______________________________________________________________
>
>"Peace cannot be kept by force.   It can only be achieved by
>            understanding."  Albert Einstein.
>
>---------------------------------------------------------------
>
>On Mon, 18 Nov 2002, tchoel . wrote:
>
> > Hi,
> >
> > I'm trying to count HTTP requests forwarded to my uplink.I've written a
> > filter given below and applied this to the uplink interface as output
> > filter. Is this is a safe method to mesure http requests ?
> >
> > Regards,
> > Tchoel
> >
> > firewall filter httpRequests {
> >     term countHttp{
> >          from {
> >              protocol tcp;
> >              port 80;
> >              tcp-initial;
> >          }
> >          then{
> >              count httpRequests;
> >              accept;
> >      }
> >      term others{
> >          then{
> >               accept;
> >      }
> > }
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > _________________________________________________________________
> > MSN 8 with e-mail virus protection service: 2 months FREE*
> > http://join.msn.com/?page=features/virus
> >
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp@puck.nether.net
> > http://puck.nether.net/mailman/listinfo/juniper-nsp
> >
>
>_______________________________________________
>juniper-nsp mailing list juniper-nsp@puck.nether.net
>http://puck.nether.net/mailman/listinfo/juniper-nsp


_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963