Re: Log format

Hi there,

I'd recommend you read through the documentation concerning the content of the log messages, which includes detail on how to further configure the content thereof: https://www.privoxy.org/user-manual/config.html#DEBUGGING

You can add a column for the destination IP of the request, for example, if not the actual application.

HTH,

ian

On Mon, 13 Jul 2020, at 08:42, U.Mutlu wrote:
> Hi,
> I'm running privoxy from the Debian repo on a Debian 8 box, ie.:
> $ dpkg -l | grep -i privoxy
> ii  privoxy  3.0.21-7+deb8u1  amd64  Privacy enhancing HTTP Proxy
> 
> Here is an excerpt from the logfile /var/log/privoxy/logfile:
> 
> 2020-07-13 03:40:04.264 7fdd4cff9700 Crunch: Connection failure: 
> android.clients.google.com:443
> 2020-07-13 03:43:59.317 7fdd6d5cf700 Crunch: Connection failure: 
> mtalk.google.com:5228
> 
> My machines (PC, Laptop, router) are running 24/7, but I do block
> some companies via their IP blocks (for example google.com, amazon.com,
> akamai.com, facebook.com, microsoft.com, opera.com) at IP level in the
> firewall on the router, and open it only on demand. So, when I go to bed
> I do block these. That's also the reason why the above connection attempts 
> failed. That's good.
> 
> Questions regarding the above log entries:
> 
> 1) What does the 3rd column ("7fdd...") mean?
> Is it the source IP where the connection request came from?
> That would be useful, especially if also the PID/UID etc. is encoded in it.
> 
> 2) What does "Crunch" mean in this context?
> 
> 3) How can I find out which application(s) made these connection attempts?
> As said it's a laptop running Debian 8, so I wonder why android/google
> is involved here. I have also the web browser google chrome installed,
> but it wasn't running at the time of the above log entries.
> 
> 
> -- 
> Thx
> _______________________________________________
> Privoxy-users mailing list
> [email protected]
> https://lists.privoxy.org/mailman/listinfo/privoxy-users
>