Squid com autenticação integrada ao Captive Portal

marcelloc

Seu pfsense é 2.0 ou 2.1?

naarea

2.1 recem instalado e fazendo testes.

marcelloc

No log do squid não aparece nenhuma linha de log com usuário?

naarea

Nada, apenas esses erros falando do helper.

Já tentei baixar o check_ip.php de novo e trocar, tentei tirar o \n do ERR, colocar, fazer um TRIM e nada. Ele acha algum problema.

marcelloc

este erro aparece no access.log ou no cache.log?

naarea

no cache.log

marcelloc

Você está usando o proxy configurado no browser ou no modo transparente?

Vou tentar simular isso aqui aqui novamente.

naarea

Tava configurado no browser.

Coloquei em modo transparente e agora ta OK.

Ainda não entendi.

Marcelo, aquela questão das Libs de baixar pelo fetch esta acontecendo sempre viu!! Muita gente deve estar apanhando disso.

Agora ta funcionando fino!! Parabens pelo trabalho, muito bom!!!

abarbosao

Bom dia.

Instalei a versão 2.1 do pfSense, os pacotes squid3-dev, e configurei a autenticação para o Captive Portal(CP). "Tudo" funcionou, exceto pelo fato de que o CP não está enviando as informações de autenticação dos usuários, ou seja, somente o primeiro usuário a se autenticar no CP consegue navegar, pois para esse, o CP envia para o Squid as informações de autenticação.

Alguém pode me ajudar?

Grato.

Alexandre.

marcelloc

Se todos os usuários estão chegando por um único ip, o captive portal vai fazer exatamente o que descreveu.

Se for o caso, configure seu AP em modo bridge para que os clientes peguem ip da rede e não fiquem mascarados atrás do ip do router WIFI

Bruno Carriel

Um dúvida sobre o captive portal.

É possível customizar e possibilitar que o usuário realize seu cadastro no captive portal?

att

Guest

Tenho um firewall centOS e preciso trocar com urgência ( pra ontem)
Qual a versão do pfsense amd64, que é homologada para o squid3-dev 3.3.10.
Pois estou tentado implementar o pfsense mas estou tendo dificuldade com o squid3-dev 3.3.10 quando faço integração com autenticação no captive portal, a primeira conexão conecta-se normalmente quando faço a segunda conexão da o seguinte erro.
obs: mesmo com usuarios diferentes.

ERROR
The requested URL could not be retrieved
O seguinte erro foi encontrado ao tentar recuperar a URL: http://terra.com.br/
Acesso negado.
A configuração do controle de acesso impede que sua requisição seja permitida neste momento. Por favor, contate seu provedor de serviço se você acha que isso está incorreto.
Seu administrador do cache é admin@localhost.
Gerado Wed, 29 Jan 2014 18:24:50 GMT por localhost (squid/3.3.10)

será que estou fazendo alguma configuração de cache errada?
Obs: estou usando o pfsense em uma vlan cisco

estou com muita urgencia de implementar o pfsense e não sei o que fazer.

Guest

a alguém que possa me ajudar?

Access.log


1393348604.490    442 192.168.1.100 TCP_MISS/302 652 GET http://www.google.com.br/ - HIER_DIRECT/74.125.131.94 text/html
1393348611.540     56 192.168.1.100 TCP_MISS/204 271 GET http://www.gstatic.com/generate_204 - HIER_DIRECT/173.194.42.143 text/html
1393348963.363   1352 192.168.1.100 TCP_MISS/302 652 GET http://www.google.com.br/ calebe HIER_DIRECT/74.125.131.94 text/html
1393348968.370    182 192.168.1.100 TCP_MISS/204 271 GET http://www.gstatic.com/generate_204 calebe HIER_DIRECT/173.194.42.143 text/html
1393348970.805    114 192.168.1.100 TCP_MISS/200 286 GET http://www.msftncsi.com/ncsi.txt calebe HIER_DIRECT/200.143.247.9 text/plain
1393348970.954    367 192.168.1.100 TCP_MISS/200 1117 GET http://download.newnext.me/spark.bin? calebe HIER_DIRECT/200.143.247.16 application/octet-stream
1393348973.984    579 192.168.1.100 TCP_MISS/200 1290 GET http://api.skype.com/users/harrissonstorch/profile/avatar calebe HIER_DIRECT/91.190.216.7 image/jpeg
1393348998.729    114 192.168.1.100 TCP_MISS/304 334 GET http://crl.microsoft.com/pki/crl/products/MicWinHarComPCA_2010-11-01.crl calebe HIER_DIRECT/200.143.247.17 application/pkix-crl
1393349003.855    578 192.168.1.100 TCP_MISS/304 284 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(6).crl calebe HIER_DIRECT/65.54.93.70 application/pkix-crl
1393349008.557    117 192.168.1.100 TCP_MISS/304 425 GET http://ocsp.entrust.net/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTXgePhfsJco9hFmE0qWx1GtVqUPQQUKnCVOp%2F2k8XzisWoY7s9lCzmygcCBEwOjDk%3D calebe HIER_DIRECT/23.10.53.231 application/ocsp-response
1393349013.134     42 192.168.1.100 TCP_MISS/304 334 GET http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl calebe HIER_DIRECT/200.143.247.17 application/pkix-crl
1393349017.755     69 192.168.1.100 TCP_MISS/304 294 GET http://pki.google.com/GIAG2.crl calebe HIER_DIRECT/173.194.42.134 -
1393349022.403     97 192.168.1.100 TCP_MISS/304 359 GET http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab calebe HIER_DIRECT/200.143.247.17 application/octet-stream
1393349026.993     42 192.168.1.100 TCP_MISS/304 333 GET http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl calebe HIER_DIRECT/200.143.247.17 application/pkix-crl
1393349031.597     65 192.168.1.100 TCP_MISS/304 333 GET http://crl.microsoft.com/pki/crl/products/WinPCA.crl calebe HIER_DIRECT/200.143.247.17 application/pkix-crl
1393349036.158     36 192.168.1.100 TCP_MISS/304 425 GET http://ocsp.entrust.net/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTYqntZF2XfWd4vuxzYev4PhVs0zQQUHvGriQb4SQ8BM3fuFHruGXyTKE0CBEwfPzY%3D calebe HIER_DIRECT/23.10.53.231 application/ocsp-response
1393349040.734     42 192.168.1.100 TCP_MISS/304 334 GET http://crl.microsoft.com/pki/crl/products/MicrosoftRootAuthority.crl calebe HIER_DIRECT/200.143.247.17 application/pkix-crl
1393349045.652    380 192.168.1.100 TCP_MISS/304 284 GET http://mscrl.microsoft.com/pki/mscorp/crl/mswww(5).crl calebe HIER_DIRECT/65.54.93.70 application/pkix-crl
1393349050.732    531 192.168.1.100 TCP_MISS/304 513 GET http://www.microsoft.com/pki/CRL/products/Microsoft%20Windows%20Hardware%20Compatibility%20PCA(1).crl calebe HIER_DIRECT/64.4.11.42 -
1393349055.309     37 192.168.1.100 TCP_MISS/304 425 GET http://ocsp.entrust.net/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBSgLXLbL4La7i%2B3dMpUpZCcZtKubgQU6r8QpQEelY%2FJVbRnYKSP%2FYsPErQCBEKHQKU%3D calebe HIER_DIRECT/23.10.53.231 application/ocsp-response
1393349059.905     53 192.168.1.100 TCP_MISS/304 333 GET http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl calebe HIER_DIRECT/200.143.247.17 application/pkix-crl
1393349221.381     42 192.168.1.102 TCP_DENIED/403 4057 GET http://www.microsoft.com/isapi/redir.dll? - HIER_NONE/- text/html
1393349222.302    190 192.168.1.102 TCP_DENIED/403 3825 GET http://www.squid-cache.org/Artwork/SN.png - HIER_NONE/- text/html
1393349222.465    136 192.168.1.102 TCP_DENIED/403 3859 GET http://api.webrep.avast.com/v1/rating/microsoft.com? - HIER_NONE/- text/html
1393349310.944    425 192.168.1.100 TCP_MISS/302 652 GET http://www.google.com.br/ calebe HIER_DIRECT/74.125.131.94 text/html
1393349314.987    185 192.168.1.100 TCP_MISS/204 271 GET http://www.gstatic.com/generate_204 calebe HIER_DIRECT/173.194.42.143 text/html

Cache.log


2014/02/25 14:16:25 kid1| Starting Squid Cache version 3.3.10 for amd64-portbld-freebsd8.3...
2014/02/25 14:16:25 kid1| Process ID 97479
2014/02/25 14:16:25 kid1| Process Roles: worker
2014/02/25 14:16:25 kid1| With 11095 file descriptors available
2014/02/25 14:16:25 kid1| Initializing IP Cache...
2014/02/25 14:16:25 kid1| DNS Socket created at [::], FD 12
2014/02/25 14:16:25 kid1| DNS Socket created at 0.0.0.0, FD 13
2014/02/25 14:16:25 kid1| Adding domain localdomain from /etc/resolv.conf
2014/02/25 14:16:25 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2014/02/25 14:16:25 kid1| Adding nameserver 172.20.2.126 from /etc/resolv.conf
2014/02/25 14:16:25 kid1| Adding nameserver 172.20.3.114 from /etc/resolv.conf
2014/02/25 14:16:25 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:25 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:16:25 kid1| Unable to load default error language files. Reset to backups.
2014/02/25 14:16:25 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:25 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.txt
2014/02/25 14:16:25 kid1| WARNING: failed to find or read error text file error-details.txt
2014/02/25 14:16:25 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:25 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:25 kid1| Logfile: opening log /var/squid/logs/access.log
2014/02/25 14:16:25 kid1| WARNING: log parameters now start with a module name. Use 'stdio:/var/squid/logs/access.log'
2014/02/25 14:16:25 kid1| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/02/25 14:16:25 kid1| Store logging disabled
2014/02/25 14:16:25 kid1| Swap maxSize 0 + 8192 KB, estimated 630 objects
2014/02/25 14:16:25 kid1| Target number of buckets: 31
2014/02/25 14:16:25 kid1| Using 8192 Store buckets
2014/02/25 14:16:25 kid1| Max Mem  size: 8192 KB
2014/02/25 14:16:25 kid1| Max Swap size: 0 KB
2014/02/25 14:16:25 kid1| Using Least Load store dir selection
2014/02/25 14:16:25 kid1| Current Directory is /etc
2014/02/25 14:16:25 kid1| Loaded Icons.
2014/02/25 14:16:25 kid1| HTCP Disabled.
2014/02/25 14:16:25 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:16:25 kid1| Pinger socket opened on FD 23
2014/02/25 14:16:25 kid1| Squid plugin modules loaded: 0
2014/02/25 14:16:25 kid1| Adaptation support is off.
2014/02/25 14:16:25 kid1| Accepting HTTP Socket connections at local=192.168.1.1:3128 remote=[::] FD 17 flags=9
2014/02/25 14:16:25 kid1| Accepting NAT intercepted HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 18 flags=41
2014/02/25 14:16:25 kid1| Accepting ICP messages on [::]:7
2014/02/25 14:16:25 kid1| Sending ICP messages from [::]:7
2014/02/25 14:16:25| pinger: Initialising ICMP pinger ...
2014/02/25 14:16:25| pinger: ICMP socket opened.
2014/02/25 14:16:25| pinger: ICMPv6 socket opened
2014/02/25 14:16:26 kid1| Preparing for shutdown after 0 requests
2014/02/25 14:16:26 kid1| Waiting 3 seconds for active connections to finish
2014/02/25 14:16:26 kid1| Closing HTTP port 192.168.1.1:3128
2014/02/25 14:16:26 kid1| Closing HTTP port 127.0.0.1:3128
2014/02/25 14:16:26 kid1| Stop receiving ICP on [::]:7
2014/02/25 14:16:26 kid1| Closing Pinger socket on FD 23
2014/02/25 14:16:26 kid1| Shutdown: NTLM authentication.
2014/02/25 14:16:26 kid1| Shutdown: Negotiate authentication.
2014/02/25 14:16:26 kid1| Shutdown: Digest authentication.
2014/02/25 14:16:26 kid1| Shutdown: Basic authentication.
2014/02/25 14:16:26 kid1| storeLateRelease: released 0 objects
2014/02/25 14:16:33 kid1| Starting Squid Cache version 3.3.10 for amd64-portbld-freebsd8.3...
2014/02/25 14:16:33 kid1| Process ID 20857
2014/02/25 14:16:33 kid1| Process Roles: worker
2014/02/25 14:16:33 kid1| With 11095 file descriptors available
2014/02/25 14:16:33 kid1| Initializing IP Cache...
2014/02/25 14:16:33 kid1| DNS Socket created at [::], FD 12
2014/02/25 14:16:33 kid1| DNS Socket created at 0.0.0.0, FD 13
2014/02/25 14:16:33 kid1| Adding domain localdomain from /etc/resolv.conf
2014/02/25 14:16:33 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2014/02/25 14:16:33 kid1| Adding nameserver 172.20.2.126 from /etc/resolv.conf
2014/02/25 14:16:33 kid1| Adding nameserver 172.20.3.114 from /etc/resolv.conf
2014/02/25 14:16:33 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:33 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:16:33 kid1| Unable to load default error language files. Reset to backups.
2014/02/25 14:16:33 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:33 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.txt
2014/02/25 14:16:33 kid1| WARNING: failed to find or read error text file error-details.txt
2014/02/25 14:16:33 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:33 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:16:33 kid1| Logfile: opening log /var/squid/logs/access.log
2014/02/25 14:16:33 kid1| WARNING: log parameters now start with a module name. Use 'stdio:/var/squid/logs/access.log'
2014/02/25 14:16:33 kid1| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/02/25 14:16:33 kid1| Store logging disabled
2014/02/25 14:16:33 kid1| Swap maxSize 0 + 8192 KB, estimated 630 objects
2014/02/25 14:16:33 kid1| Target number of buckets: 31
2014/02/25 14:16:33 kid1| Using 8192 Store buckets
2014/02/25 14:16:33 kid1| Max Mem  size: 8192 KB
2014/02/25 14:16:33 kid1| Max Swap size: 0 KB
2014/02/25 14:16:33 kid1| Using Least Load store dir selection
2014/02/25 14:16:33 kid1| Current Directory is /etc
2014/02/25 14:16:33 kid1| Loaded Icons.
2014/02/25 14:16:33 kid1| HTCP Disabled.
2014/02/25 14:16:33 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:16:33 kid1| Pinger socket opened on FD 23
2014/02/25 14:16:33 kid1| Squid plugin modules loaded: 0
2014/02/25 14:16:33 kid1| Adaptation support is off.
2014/02/25 14:16:33 kid1| Accepting HTTP Socket connections at local=192.168.1.1:3128 remote=[::] FD 17 flags=9
2014/02/25 14:16:33 kid1| Accepting NAT intercepted HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 18 flags=41
2014/02/25 14:16:33 kid1| Accepting ICP messages on [::]:7
2014/02/25 14:16:33 kid1| Sending ICP messages from [::]:7
2014/02/25 14:16:33| pinger: Initialising ICMP pinger ...
2014/02/25 14:16:33| pinger: ICMP socket opened.
2014/02/25 14:16:33| pinger: ICMPv6 socket opened
2014/02/25 14:16:34 kid1| storeLateRelease: released 0 objects
2014/02/25 14:16:44| Error sending to ICMPv6 packet to [2607:f8b0:400c:c03::5e]. ERR: (65) No route to host
2014/02/25 14:16:51| Error sending to ICMPv6 packet to [2800:3f0:4004:800::100f]. ERR: (65) No route to host
2014/02/25 14:17:36 kid1| Reconfiguring Squid Cache (version 3.3.10)...
2014/02/25 14:17:36 kid1| Closing HTTP port 192.168.1.1:3128
2014/02/25 14:17:36 kid1| Closing HTTP port 127.0.0.1:3128
2014/02/25 14:17:36 kid1| Stop receiving ICP on [::]:7
2014/02/25 14:17:36 kid1| Closing Pinger socket on FD 23
2014/02/25 14:17:36 kid1| Stop sending ICP from [::]:7
2014/02/25 14:17:36 kid1| Logfile: closing log stdio:/var/squid/logs/access.log
2014/02/25 14:17:36 kid1| Startup: Initializing Authentication Schemes ...
2014/02/25 14:17:36 kid1| Startup: Initialized Authentication Scheme 'basic'
2014/02/25 14:17:36 kid1| Startup: Initialized Authentication Scheme 'digest'
2014/02/25 14:17:36 kid1| Startup: Initialized Authentication Scheme 'negotiate'
2014/02/25 14:17:36 kid1| Startup: Initialized Authentication Scheme 'ntlm'
2014/02/25 14:17:36 kid1| Startup: Initialized Authentication.
2014/02/25 14:17:36 kid1| Processing Configuration File: /usr/pbi/squid-amd64/etc/squid/squid.conf (depth 0)
2014/02/25 14:17:36 kid1| Starting Authentication on port 127.0.0.1:3128
2014/02/25 14:17:36 kid1| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2014/02/25 14:17:36 kid1| Disabling IPv6 on port 127.0.0.1:3128 (interception enabled)
2014/02/25 14:17:36 kid1| Initializing https proxy context
2014/02/25 14:17:36 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:17:36 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:17:36 kid1| Unable to load default error language files. Reset to backups.
2014/02/25 14:17:36 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:17:36 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.txt
2014/02/25 14:17:36 kid1| WARNING: failed to find or read error text file error-details.txt
2014/02/25 14:17:36 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:17:36 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:17:36 kid1| Logfile: opening log /var/squid/logs/access.log
2014/02/25 14:17:36 kid1| WARNING: log parameters now start with a module name. Use 'stdio:/var/squid/logs/access.log'
2014/02/25 14:17:36 kid1| Squid plugin modules loaded: 0
2014/02/25 14:17:36 kid1| Adaptation support is off.
2014/02/25 14:17:36 kid1| Store logging disabled
2014/02/25 14:17:36 kid1| DNS Socket created at [::], FD 17
2014/02/25 14:17:36 kid1| DNS Socket created at 0.0.0.0, FD 18
2014/02/25 14:17:36 kid1| Adding domain localdomain from /etc/resolv.conf
2014/02/25 14:17:36 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2014/02/25 14:17:36 kid1| Adding nameserver 172.20.2.126 from /etc/resolv.conf
2014/02/25 14:17:36 kid1| Adding nameserver 172.20.3.114 from /etc/resolv.conf
2014/02/25 14:17:36 kid1| helperOpenServers: Starting 5/5 'check_ip.php' processes
2014/02/25 14:17:36 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:17:36 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:17:36 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:17:36 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:17:36 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:17:36 kid1| HTCP Disabled.
2014/02/25 14:17:36 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:17:36 kid1| Pinger socket opened on FD 40
2014/02/25 14:17:36 kid1| Loaded Icons.
2014/02/25 14:17:36 kid1| Accepting HTTP Socket connections at local=192.168.1.1:3128 remote=[::] FD 36 flags=9
2014/02/25 14:17:36 kid1| Accepting NAT intercepted HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 37 flags=41
2014/02/25 14:17:36 kid1| Accepting ICP messages on [::]:7
2014/02/25 14:17:36 kid1| Sending ICP messages from [::]:7
2014/02/25 14:17:36| pinger: Initialising ICMP pinger ...
2014/02/25 14:17:36| pinger: ICMP socket opened.
2014/02/25 14:17:36| pinger: ICMPv6 socket opened
2014/02/25 14:17:47 kid1| Preparing for shutdown after 2 requests
2014/02/25 14:17:47 kid1| Waiting 3 seconds for active connections to finish
2014/02/25 14:17:47 kid1| Closing HTTP port 192.168.1.1:3128
2014/02/25 14:17:47 kid1| Closing HTTP port 127.0.0.1:3128
2014/02/25 14:17:47 kid1| Stop receiving ICP on [::]:7
2014/02/25 14:17:47 kid1| Closing Pinger socket on FD 40
2014/02/25 14:17:47 kid1| Shutdown: NTLM authentication.
2014/02/25 14:17:47 kid1| Shutdown: Negotiate authentication.
2014/02/25 14:17:47 kid1| Shutdown: Digest authentication.
2014/02/25 14:17:47 kid1| Shutdown: Basic authentication.
2014/02/25 14:17:52 kid1| Shutting down...
2014/02/25 14:17:52 kid1| Stop sending ICP from [::]:7
2014/02/25 14:17:52 kid1| storeDirWriteCleanLogs: Starting...
2014/02/25 14:17:52 kid1|   Finished.  Wrote 0 entries.
2014/02/25 14:17:52 kid1|   Took 0.00 seconds (  0.00 entries/sec).
CPU Usage: 0.062 seconds = 0.054 user + 0.008 sys
Maximum Resident Size: 65344 KB
Page faults with physical i/o: 2
2014/02/25 14:17:52 kid1| Logfile: closing log stdio:/var/squid/logs/access.log
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    12 /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    13 /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.t
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    14 /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    15 /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.t
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    17 DNS Socket IPv6
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    18 DNS Socket IPv4
2014/02/25 14:17:52 kid1| Open FD READ/WRITE   22 Idle client: Waiting for next request
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    23 check_ip.php #1
2014/02/25 14:17:52 kid1| Open FD READ/WRITE   26 Idle client: Waiting for next request
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    29 check_ip.php #2
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    31 check_ip.php #3
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    33 check_ip.php #4
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    35 check_ip.php #5
2014/02/25 14:17:52 kid1| Open FD UNSTARTED    38 Incoming ICP port
2014/02/25 14:17:52 kid1| Squid Cache (Version 3.3.10): Exiting normally.
2014/02/25 14:19:59 kid1| Starting Squid Cache version 3.3.10 for amd64-portbld-freebsd8.3...
2014/02/25 14:19:59 kid1| Process ID 95316
2014/02/25 14:19:59 kid1| Process Roles: worker
2014/02/25 14:19:59 kid1| With 11095 file descriptors available
2014/02/25 14:19:59 kid1| Initializing IP Cache...
2014/02/25 14:19:59 kid1| DNS Socket created at [::], FD 12
2014/02/25 14:19:59 kid1| DNS Socket created at 0.0.0.0, FD 13
2014/02/25 14:19:59 kid1| Adding domain localdomain from /etc/resolv.conf
2014/02/25 14:19:59 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2014/02/25 14:19:59 kid1| Adding nameserver 172.20.2.126 from /etc/resolv.conf
2014/02/25 14:19:59 kid1| Adding nameserver 172.20.3.114 from /etc/resolv.conf
2014/02/25 14:19:59 kid1| helperOpenServers: Starting 5/5 'check_ip.php' processes
2014/02/25 14:19:59 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:19:59 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:19:59 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:19:59 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:19:59 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:19:59 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:19:59 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:19:59 kid1| Unable to load default error language files. Reset to backups.
2014/02/25 14:19:59 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:19:59 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.txt
2014/02/25 14:19:59 kid1| WARNING: failed to find or read error text file error-details.txt
2014/02/25 14:19:59 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:19:59 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:19:59 kid1| Logfile: opening log /var/squid/logs/access.log
2014/02/25 14:19:59 kid1| WARNING: log parameters now start with a module name. Use 'stdio:/var/squid/logs/access.log'
2014/02/25 14:19:59 kid1| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/02/25 14:19:59 kid1| Store logging disabled
2014/02/25 14:19:59 kid1| Swap maxSize 0 + 8192 KB, estimated 630 objects
2014/02/25 14:19:59 kid1| Target number of buckets: 31
2014/02/25 14:19:59 kid1| Using 8192 Store buckets
2014/02/25 14:19:59 kid1| Max Mem  size: 8192 KB
2014/02/25 14:19:59 kid1| Max Swap size: 0 KB
2014/02/25 14:19:59 kid1| Using Least Load store dir selection
2014/02/25 14:19:59 kid1| Current Directory is /etc
2014/02/25 14:19:59 kid1| Loaded Icons.
2014/02/25 14:19:59 kid1| HTCP Disabled.
2014/02/25 14:19:59 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:19:59 kid1| Pinger socket opened on FD 33
2014/02/25 14:19:59 kid1| Squid plugin modules loaded: 0
2014/02/25 14:19:59 kid1| Adaptation support is off.
2014/02/25 14:19:59 kid1| Accepting HTTP Socket connections at local=192.168.1.1:3128 remote=[::] FD 29 flags=9
2014/02/25 14:19:59 kid1| Accepting NAT intercepted HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 30 flags=41
2014/02/25 14:19:59 kid1| Accepting ICP messages on [::]:7
2014/02/25 14:19:59 kid1| Sending ICP messages from [::]:7
2014/02/25 14:19:59| pinger: Initialising ICMP pinger ...
2014/02/25 14:19:59| pinger: ICMP socket opened.
2014/02/25 14:19:59| pinger: ICMPv6 socket opened
2014/02/25 14:20:00 kid1| Preparing for shutdown after 0 requests
2014/02/25 14:20:00 kid1| Waiting 3 seconds for active connections to finish
2014/02/25 14:20:00 kid1| Closing HTTP port 192.168.1.1:3128
2014/02/25 14:20:00 kid1| Closing HTTP port 127.0.0.1:3128
2014/02/25 14:20:00 kid1| Stop receiving ICP on [::]:7
2014/02/25 14:20:00 kid1| Closing Pinger socket on FD 33
2014/02/25 14:20:00 kid1| Shutdown: NTLM authentication.
2014/02/25 14:20:00 kid1| Shutdown: Negotiate authentication.
2014/02/25 14:20:00 kid1| Shutdown: Digest authentication.
2014/02/25 14:20:00 kid1| Shutdown: Basic authentication.
2014/02/25 14:20:00 kid1| storeLateRelease: released 0 objects
2014/02/25 14:20:07 kid1| Starting Squid Cache version 3.3.10 for amd64-portbld-freebsd8.3...
2014/02/25 14:20:07 kid1| Process ID 16045
2014/02/25 14:20:07 kid1| Process Roles: worker
2014/02/25 14:20:07 kid1| With 11095 file descriptors available
2014/02/25 14:20:07 kid1| Initializing IP Cache...
2014/02/25 14:20:07 kid1| DNS Socket created at [::], FD 12
2014/02/25 14:20:07 kid1| DNS Socket created at 0.0.0.0, FD 13
2014/02/25 14:20:07 kid1| Adding domain localdomain from /etc/resolv.conf
2014/02/25 14:20:07 kid1| Adding nameserver 127.0.0.1 from /etc/resolv.conf
2014/02/25 14:20:07 kid1| Adding nameserver 172.20.2.126 from /etc/resolv.conf
2014/02/25 14:20:07 kid1| Adding nameserver 172.20.3.114 from /etc/resolv.conf
2014/02/25 14:20:07 kid1| helperOpenServers: Starting 5/5 'check_ip.php' processes
2014/02/25 14:20:07 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:20:07 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:20:07 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:20:07 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:20:07 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:20:07 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:20:07 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/en/error-details.txt
2014/02/25 14:20:07 kid1| Unable to load default error language files. Reset to backups.
2014/02/25 14:20:07 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:20:07 kid1|  parse error while reading template file: /usr/pbi/squid-amd64/etc/squid/errors/templates/error-details.txt
2014/02/25 14:20:07 kid1| WARNING: failed to find or read error text file error-details.txt
2014/02/25 14:20:07 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:20:07 kid1| WARNING! invalid error detail name: X509_V_ERR_DIFFERENT_CRL_SCOPE
2014/02/25 14:20:07 kid1| Logfile: opening log /var/squid/logs/access.log
2014/02/25 14:20:07 kid1| WARNING: log parameters now start with a module name. Use 'stdio:/var/squid/logs/access.log'
2014/02/25 14:20:07 kid1| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/02/25 14:20:07 kid1| Store logging disabled
2014/02/25 14:20:07 kid1| Swap maxSize 0 + 8192 KB, estimated 630 objects
2014/02/25 14:20:07 kid1| Target number of buckets: 31
2014/02/25 14:20:07 kid1| Using 8192 Store buckets
2014/02/25 14:20:07 kid1| Max Mem  size: 8192 KB
2014/02/25 14:20:07 kid1| Max Swap size: 0 KB
2014/02/25 14:20:07 kid1| Using Least Load store dir selection
2014/02/25 14:20:07 kid1| Current Directory is /etc
2014/02/25 14:20:07 kid1| Loaded Icons.
2014/02/25 14:20:07 kid1| HTCP Disabled.
2014/02/25 14:20:07 kid1| WARNING: no_suid: setuid(0): (1) Operation not permitted
2014/02/25 14:20:07 kid1| Pinger socket opened on FD 33
2014/02/25 14:20:07 kid1| Squid plugin modules loaded: 0
2014/02/25 14:20:07 kid1| Adaptation support is off.
2014/02/25 14:20:07 kid1| Accepting HTTP Socket connections at local=192.168.1.1:3128 remote=[::] FD 29 flags=9
2014/02/25 14:20:07 kid1| Accepting NAT intercepted HTTP Socket connections at local=127.0.0.1:3128 remote=[::] FD 30 flags=41
2014/02/25 14:20:07 kid1| Accepting ICP messages on [::]:7
2014/02/25 14:20:07 kid1| Sending ICP messages from [::]:7
2014/02/25 14:20:07| pinger: Initialising ICMP pinger ...
2014/02/25 14:20:07| pinger: ICMP socket opened.
2014/02/25 14:20:07| pinger: ICMPv6 socket opened
2014/02/25 14:20:08 kid1| storeLateRelease: released 0 objects
2014/02/25 14:21:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:21:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:21:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:21:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:21:07 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:22:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:22:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:22:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:22:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:22:07 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:22:43| Error sending to ICMPv6 packet to [2607:f8b0:400c:c03::5e]. ERR: (65) No route to host
2014/02/25 14:22:48| Error sending to ICMPv6 packet to [2800:3f0:4004:800::100f]. ERR: (65) No route to host
2014/02/25 14:23:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:23:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:23:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:23:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:23:28| Error sending to ICMPv6 packet to [2600:1403:2:3a4::1b01]. ERR: (65) No route to host
2014/02/25 14:24:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:24:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:24:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:24:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:25:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:25:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:25:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:25:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:25:15 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:26:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:26:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:26:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:26:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:26:15 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:27:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:27:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:27:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:27:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:28:01 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:28:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:28:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:28:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:28:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:28:30| Error sending to ICMPv6 packet to [2800:3f0:4004:800::1018]. ERR: (65) No route to host
2014/02/25 14:29:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:29:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:29:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:29:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:29:30 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:30:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:30:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:30:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:30:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:30:30 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR
'
2014/02/25 14:31:07 kid1| helperHandleRead: unexpected read from check_filter #2, 4 bytes 'ERR
'
2014/02/25 14:31:07 kid1| helperHandleRead: unexpected read from check_filter #3, 4 bytes 'ERR
'
2014/02/25 14:31:07 kid1| helperHandleRead: unexpected read from check_filter #4, 4 bytes 'ERR
'
2014/02/25 14:31:07 kid1| helperHandleRead: unexpected read from check_filter #5, 4 bytes 'ERR
'
2014/02/25 14:31:30 kid1| helperHandleRead: unexpected read from check_filter #1, 4 bytes 'ERR

portalauth


Feb 25 13:03:55 pfSense logportalauth[36342]: Reconfiguring captive portal(dcfm).
Feb 25 13:04:14 pfSense php[36342]: /system_usermanager.php: Tried to remove user  but got user pw instead. Bailing.
Feb 25 13:04:34 pfSense logportalauth[93891]: LOGIN: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:04:36 pfSense logportalauth[93891]: LOGIN: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:04:36 pfSense logportalauth[93891]: CONCURRENT LOGIN - REUSING OLD SESSION: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:04:41 pfSense logportalauth[93891]: LOGIN: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:04:41 pfSense logportalauth[93891]: CONCURRENT LOGIN - REUSING OLD SESSION: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:04:41 pfSense logportalauth[93891]: LOGIN: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:04:41 pfSense logportalauth[93891]: CONCURRENT LOGIN - REUSING OLD SESSION: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:05:28 pfSense php[36342]: /reboot.php: Stopping all packages.
Feb 25 13:14:23 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:14:28 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:14:40 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:15:03 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:15:09 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:15:14 pfSense logportalauth[46467]: LOGIN: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:16:00 pfSense logportalauth[33226]: DISCONNECT: admin, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:16:05 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:16:13 pfSense logportalauth[46467]: FAILURE: teste, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:16:37 pfSense php[33226]: /system_usermanager.php: Tried to remove user  but got user pw instead. Bailing.
Feb 25 13:16:48 pfSense logportalauth[46467]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:17:59 pfSense php[33226]: /pkg_mgr_install.php: Beginning package installation for squid3-dev .
Feb 25 13:20:15 pfSense php[33226]: /pkg_mgr_install.php: Stopping any running proxy monitors
Feb 25 13:20:16 pfSense php[33226]: /pkg_mgr_install.php: Starting Squid
Feb 25 13:20:16 pfSense php[33226]: /pkg_mgr_install.php: Starting a proxy monitor script
Feb 25 13:20:16 pfSense php[33226]: /pkg_mgr_install.php: [Squid] - Squid_resync function call pr:1 bp:1 rpc:no
Feb 25 13:20:17 pfSense php[33226]: /pkg_mgr_install.php: [Squid] - Squid_resync function call pr: bp:1 rpc:no
Feb 25 13:20:40 pfSense php[33226]: /reboot.php: Stopping all packages.
Feb 25 13:20:45 pfSense php[33226]: /reboot.php: The command '/usr/local/etc/rc.d/squid.sh stop' returned exit code '1', the output was '/libexec/ld-elf.so.1: Shared object "libheimntlm.so.10" not found, required by "squid"' 
Feb 25 13:48:35 pfSense logportalauth[46924]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:48:38 pfSense logportalauth[46924]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:48:38 pfSense logportalauth[46924]: CONCURRENT LOGIN - REUSING OLD SESSION: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:48:47 pfSense logportalauth[46924]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 13:48:47 pfSense logportalauth[46924]: CONCURRENT LOGIN - REUSING OLD SESSION: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:16:25 pfSense squid[96786]: Squid Parent: will start 1 kids
Feb 25 14:16:25 pfSense squid[96786]: Squid Parent: (squid-1) process 97479 started
Feb 25 14:16:27 pfSense squid[96786]: Squid Parent: (squid-1) process 97479 exited due to signal 15 with status 0
Feb 25 14:16:27 pfSense squid[96786]: Exiting due to unexpected forced shutdown
Feb 25 14:16:33 pfSense squid[20351]: Squid Parent: will start 1 kids
Feb 25 14:16:33 pfSense squid[20351]: Squid Parent: (squid-1) process 20857 started
Feb 25 14:16:43 pfSense logportalauth[50997]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:17:52 pfSense squid[20351]: Squid Parent: (squid-1) process 20857 exited with status 0
Feb 25 14:19:59 pfSense squid[94653]: Squid Parent: will start 1 kids
Feb 25 14:19:59 pfSense squid[94653]: Squid Parent: (squid-1) process 95316 started
Feb 25 14:20:01 pfSense squid[94653]: Squid Parent: (squid-1) process 95316 exited due to signal 15 with status 0
Feb 25 14:20:01 pfSense squid[94653]: Exiting due to unexpected forced shutdown
Feb 25 14:20:07 pfSense squid[14677]: Squid Parent: will start 1 kids
Feb 25 14:20:07 pfSense squid[14677]: Squid Parent: (squid-1) process 16045 started
Feb 25 14:20:58 pfSense logportalauth[51746]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:21:04 pfSense logportalauth[51746]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:21:04 pfSense logportalauth[51746]: CONCURRENT LOGIN - REUSING OLD SESSION: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:21:12 pfSense logportalauth[38353]: DISCONNECT: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:22:41 pfSense logportalauth[51746]: LOGIN: calebe, f0:4d:a2:e6:1e:25, 192.168.1.100
Feb 25 14:27:01 pfSense logportalauth[51746]: LOGIN: admin, 00:0e:a6:67:db:f3, 192.168.1.102

squid.conf


# This file is automatically generated by pfSense
# Do not edit manually !

http_port 192.168.1.1:3128
http_port 127.0.0.1:3128 intercept
icp_port 7
dns_v4_first off
pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_default_language en
icon_directory /usr/pbi/squid-amd64/etc/squid/icons
visible_hostname localhost
cache_mgr admin@localhost
access_log /var/squid/logs/access.log
cache_log /var/squid/logs/cache.log
cache_store_log none

logfile_rotate 0
shutdown_lifetime 3 seconds
# Allow local network(s) on interface(s)
acl localnet src  192.168.1.0/24
uri_whitespace strip

acl dynamic urlpath_regex cgi-bin \?
cache deny dynamic

cache_mem 8 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

minimum_object_size 0 KB
maximum_object_size 10 KB
offline_mode off
cache allow all

# No redirector configured

#Remote proxies

# Setup some default acls
# From 3.2 further configuration cleanups have been done to make things easier and safer. The manager, localhost, and to_localhost ACL definitions are now built-in.
# acl localhost src 127.0.0.1/32
acl allsrc src all
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 3127 1025-65535 
acl sslports port 443 563  

# From 3.2 further configuration cleanups have been done to make things easier and safer. The manager, localhost, and to_localhost ACL definitions are now built-in.
#acl manager proto cache_object

acl purge method PURGE
acl connect method CONNECT

# Define protocols used for redirects
acl HTTP proto HTTP
acl HTTPS proto HTTPS
http_access allow manager localhost

http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports

# Always allow localhost connections
# From 3.2 further configuration cleanups have been done to make things easier and safer. 
# The manager, localhost, and to_localhost ACL definitions are now built-in.
# http_access allow localhost

request_body_max_size 0 KB
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
delay_access 1 allow allsrc

# Reverse Proxy settings

# Custom options

external_acl_type check_filter children-startup=5 ttl=5 %SRC /usr/pbi/squid-amd64/libexec/squid/check_ip.php
acl dgfilter external check_filter
http_access allow dgfilter
# Default block all to be sure
http_access deny allsrc

DHCP.log


Feb 25 09:13:44 pfSense dhcpd: DHCPREQUEST for 192.168.200.20 from f0:4d:a2:e6:1e:25 via ste0: wrong network.
Feb 25 09:13:44 pfSense dhcpd: DHCPNAK on 192.168.200.20 to f0:4d:a2:e6:1e:25 via ste0
Feb 25 09:13:44 pfSense dhcpd: DHCPDISCOVER from f0:4d:a2:e6:1e:25 via ste0
Feb 25 09:13:44 pfSense dhcpd: unexpected ICMP Echo Reply from 192.168.40.1
Feb 25 09:13:45 pfSense dhcpd: DHCPOFFER on 192.168.1.100 to f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 09:13:45 pfSense dhcpd: Wrote 1 leases to leases file.
Feb 25 09:13:45 pfSense dhcpd: DHCPREQUEST for 192.168.1.100 (192.168.1.1) from f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 09:13:45 pfSense dhcpd: DHCPACK on 192.168.1.100 to f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 09:13:48 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 09:13:48 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 12:56:05 pfSense dhclient: PREINIT
Feb 25 12:56:05 pfSense dhclient: Starting delete_old_states()
Feb 25 12:56:05 pfSense dhclient: Comparing IPs: Old:  New: 
Feb 25 12:56:05 pfSense dhclient[7875]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 12:56:07 pfSense dhclient[7875]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 12:56:11 pfSense dhclient[7875]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 12:56:19 pfSense dhclient[7875]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 2
Feb 25 12:56:21 pfSense dhclient[7875]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 3
Feb 25 12:56:24 pfSense dhclient[7875]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 7
Feb 25 12:56:31 pfSense dhclient[7875]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 20
Feb 25 12:56:51 pfSense dhclient[7875]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 14
Feb 25 12:56:51 pfSense dhclient[7875]: DHCPOFFER from 192.168.40.1
Feb 25 12:56:51 pfSense dhclient: ARPSEND
Feb 25 12:56:51 pfSense dhclient[7875]: DHCPOFFER from 192.168.40.1
Feb 25 12:56:51 pfSense dhclient[7875]: DHCPOFFER already seen.
Feb 25 12:56:53 pfSense dhclient: ARPCHECK
Feb 25 12:56:53 pfSense dhclient[7875]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 12:56:53 pfSense dhclient[7875]: DHCPACK from 192.168.40.1
Feb 25 12:56:53 pfSense dhclient: BOUND
Feb 25 12:56:53 pfSense dhclient: Starting add_new_address()
Feb 25 12:56:53 pfSense dhclient: ifconfig em0 inet 192.168.40.254 netmask 255.255.255.0 broadcast 192.168.40.255 
Feb 25 12:56:53 pfSense dhclient: New IP Address (em0): 192.168.40.254
Feb 25 12:56:53 pfSense dhclient: New Subnet Mask (em0): 255.255.255.0
Feb 25 12:56:53 pfSense dhclient: New Broadcast Address (em0): 192.168.40.255
Feb 25 12:56:53 pfSense dhclient: New Routers (em0): 192.168.40.1
Feb 25 12:56:53 pfSense dhclient: Adding new routes to interface: em0
Feb 25 12:56:53 pfSense dhclient: /sbin/route add default 192.168.40.1
Feb 25 12:56:53 pfSense dhclient: Creating resolv.conf
Feb 25 12:56:53 pfSense dhclient[7875]: bound to 192.168.40.254 -- renewal in 129600 seconds.
Feb 25 12:56:57 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 12:56:57 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 12:56:57 pfSense dhcpd: All rights reserved.
Feb 25 12:56:57 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 12:56:57 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 12:56:57 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 12:56:57 pfSense dhcpd: All rights reserved.
Feb 25 12:56:57 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 12:56:57 pfSense dhcpd: Wrote 1 leases to leases file.
Feb 25 12:56:57 pfSense dhcpd: Listening on BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 12:56:57 pfSense dhcpd: Sending on   BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 12:56:57 pfSense dhcpd: Sending on   Socket/fallback/fallback-net
Feb 25 12:57:04 pfSense dhcpd: DHCPDISCOVER from f0:4d:a2:e6:1e:25 via ste0
Feb 25 12:57:05 pfSense dhcpd: DHCPOFFER on 192.168.1.100 to f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 12:57:05 pfSense dhcpd: DHCPREQUEST for 192.168.1.100 (192.168.1.1) from f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 12:57:05 pfSense dhcpd: DHCPACK on 192.168.1.100 to f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 12:57:08 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 12:57:08 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:00:26 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:00:26 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:02:09 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:02:09 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:03:32 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:03:32 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:04:34 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:04:34 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:06:49 pfSense dhclient: PREINIT
Feb 25 13:06:49 pfSense dhclient: Starting delete_old_states()
Feb 25 13:06:49 pfSense dhclient: Comparing IPs: Old:  New: 
Feb 25 13:06:49 pfSense dhclient[6662]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:06:50 pfSense dhclient[6662]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:06:52 pfSense dhclient[6662]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:06:55 pfSense dhclient[6662]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:07:03 pfSense dhclient[6662]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 2
Feb 25 13:07:05 pfSense dhclient[6662]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 3
Feb 25 13:07:08 pfSense dhclient[6662]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 6
Feb 25 13:07:14 pfSense dhclient[6662]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 15
Feb 25 13:07:29 pfSense dhclient[6662]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 18
Feb 25 13:07:29 pfSense dhclient[6662]: DHCPOFFER from 192.168.40.1
Feb 25 13:07:29 pfSense dhclient: ARPSEND
Feb 25 13:07:29 pfSense dhclient[6662]: DHCPOFFER from 192.168.40.1
Feb 25 13:07:29 pfSense dhclient[6662]: DHCPOFFER already seen.
Feb 25 13:07:31 pfSense dhclient: ARPCHECK
Feb 25 13:07:31 pfSense dhclient[6662]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:07:31 pfSense dhclient[6662]: DHCPACK from 192.168.40.1
Feb 25 13:07:31 pfSense dhclient: BOUND
Feb 25 13:07:31 pfSense dhclient: Starting add_new_address()
Feb 25 13:07:31 pfSense dhclient: ifconfig em0 inet 192.168.40.254 netmask 255.255.255.0 broadcast 192.168.40.255 
Feb 25 13:07:31 pfSense dhclient: New IP Address (em0): 192.168.40.254
Feb 25 13:07:31 pfSense dhclient: New Subnet Mask (em0): 255.255.255.0
Feb 25 13:07:31 pfSense dhclient: New Broadcast Address (em0): 192.168.40.255
Feb 25 13:07:31 pfSense dhclient: New Routers (em0): 192.168.40.1
Feb 25 13:07:31 pfSense dhclient: Adding new routes to interface: em0
Feb 25 13:07:31 pfSense dhclient: /sbin/route add default 192.168.40.1
Feb 25 13:07:31 pfSense dhclient: Creating resolv.conf
Feb 25 13:07:31 pfSense dhclient[6662]: bound to 192.168.40.254 -- renewal in 129600 seconds.
Feb 25 13:07:35 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 13:07:35 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 13:07:35 pfSense dhcpd: All rights reserved.
Feb 25 13:07:35 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 13:07:35 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 13:07:35 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 13:07:35 pfSense dhcpd: All rights reserved.
Feb 25 13:07:35 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 13:07:35 pfSense dhcpd: Wrote 1 leases to leases file.
Feb 25 13:07:35 pfSense dhcpd: Listening on BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 13:07:35 pfSense dhcpd: Sending on   BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 13:07:35 pfSense dhcpd: Sending on   Socket/fallback/fallback-net
Feb 25 13:08:29 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:08:29 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:09:58 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:09:58 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:11:18 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:11:18 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:12:29 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:12:29 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:13:57 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:13:57 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:15:20 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:15:20 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:16:24 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:16:24 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:22:05 pfSense dhclient: PREINIT
Feb 25 13:22:05 pfSense dhclient: Starting delete_old_states()
Feb 25 13:22:05 pfSense dhclient: Comparing IPs: Old:  New: 
Feb 25 13:22:05 pfSense dhclient[6400]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:22:07 pfSense dhclient[6400]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:22:12 pfSense dhclient[6400]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 2
Feb 25 13:22:14 pfSense dhclient[6400]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 3
Feb 25 13:22:17 pfSense dhclient[6400]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 6
Feb 25 13:22:23 pfSense dhclient[6400]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 14
Feb 25 13:22:37 pfSense dhclient[6400]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 17
Feb 25 13:22:37 pfSense dhclient[6400]: DHCPOFFER from 192.168.40.1
Feb 25 13:22:37 pfSense dhclient: ARPSEND
Feb 25 13:22:37 pfSense dhclient[6400]: DHCPOFFER from 192.168.40.1
Feb 25 13:22:37 pfSense dhclient[6400]: DHCPOFFER already seen.
Feb 25 13:22:39 pfSense dhclient: ARPCHECK
Feb 25 13:22:39 pfSense dhclient[6400]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 13:22:39 pfSense dhclient[6400]: DHCPACK from 192.168.40.1
Feb 25 13:22:39 pfSense dhclient: BOUND
Feb 25 13:22:39 pfSense dhclient: Starting add_new_address()
Feb 25 13:22:39 pfSense dhclient: ifconfig em0 inet 192.168.40.254 netmask 255.255.255.0 broadcast 192.168.40.255 
Feb 25 13:22:39 pfSense dhclient: New IP Address (em0): 192.168.40.254
Feb 25 13:22:39 pfSense dhclient: New Subnet Mask (em0): 255.255.255.0
Feb 25 13:22:39 pfSense dhclient: New Broadcast Address (em0): 192.168.40.255
Feb 25 13:22:39 pfSense dhclient: New Routers (em0): 192.168.40.1
Feb 25 13:22:39 pfSense dhclient: Adding new routes to interface: em0
Feb 25 13:22:39 pfSense dhclient: /sbin/route add default 192.168.40.1
Feb 25 13:22:39 pfSense dhclient: Creating resolv.conf
Feb 25 13:22:39 pfSense dhclient[6400]: bound to 192.168.40.254 -- renewal in 129600 seconds.
Feb 25 13:22:43 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 13:22:43 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 13:22:43 pfSense dhcpd: All rights reserved.
Feb 25 13:22:43 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 13:22:43 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 13:22:43 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 13:22:43 pfSense dhcpd: All rights reserved.
Feb 25 13:22:43 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 13:22:43 pfSense dhcpd: Wrote 1 leases to leases file.
Feb 25 13:22:43 pfSense dhcpd: Listening on BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 13:22:43 pfSense dhcpd: Sending on   BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 13:22:43 pfSense dhcpd: Sending on   Socket/fallback/fallback-net
Feb 25 13:23:33 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:23:33 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:24:51 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:24:51 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:26:14 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:26:14 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:27:35 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:27:35 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:28:56 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:28:56 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:30:19 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:30:19 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:31:27 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:31:27 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:33:18 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:33:18 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:34:42 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:34:42 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:35:46 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:35:46 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:37:04 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:37:04 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:39:00 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:39:00 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:40:56 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:40:56 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:42:52 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:42:52 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:44:53 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:44:53 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:46:43 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:46:43 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:48:43 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:48:43 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 13:57:05 pfSense dhcpd: DHCPREQUEST for 192.168.1.100 from f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 13:57:05 pfSense dhcpd: DHCPACK on 192.168.1.100 to f0:4d:a2:e6:1e:25 (calebepc) via ste0
Feb 25 13:58:00 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 13:58:00 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 14:00:42 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 14:00:42 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 14:01:47 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 14:01:47 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 14:03:00 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 14:03:00 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 14:03:00 pfSense dhcpd: All rights reserved.
Feb 25 14:03:00 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 14:03:00 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 14:03:00 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 14:03:00 pfSense dhcpd: All rights reserved.
Feb 25 14:03:00 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 14:03:00 pfSense dhcpd: Wrote 1 leases to leases file.
Feb 25 14:03:00 pfSense dhcpd: Listening on BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 14:03:00 pfSense dhcpd: Sending on   BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 14:03:00 pfSense dhcpd: Sending on   Socket/fallback/fallback-net
Feb 25 14:03:58 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 14:03:58 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 14:05:27 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 14:05:27 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 14:13:05 pfSense dhcpd: DHCPINFORM from 192.168.1.100 via ste0
Feb 25 14:13:05 pfSense dhcpd: DHCPACK to 192.168.1.100 (f0:4d:a2:e6:1e:25) via ste0
Feb 25 14:15:32 pfSense dhclient: PREINIT
Feb 25 14:15:32 pfSense dhclient: Starting delete_old_states()
Feb 25 14:15:32 pfSense dhclient: Comparing IPs: Old:  New: 
Feb 25 14:15:32 pfSense dhclient[8461]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 14:15:33 pfSense dhclient[8461]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 14:15:35 pfSense dhclient[8461]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 14:15:38 pfSense dhclient[8461]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 14:15:43 pfSense dhclient[8461]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 1
Feb 25 14:15:44 pfSense dhclient[8461]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 2
Feb 25 14:15:46 pfSense dhclient[8461]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 5
Feb 25 14:15:51 pfSense dhclient[8461]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 8
Feb 25 14:15:59 pfSense dhclient[8461]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 14
Feb 25 14:16:13 pfSense dhclient[8461]: DHCPDISCOVER on em0 to 255.255.255.255 port 67 interval 14
Feb 25 14:16:13 pfSense dhclient[8461]: DHCPOFFER from 192.168.40.1
Feb 25 14:16:13 pfSense dhclient: ARPSEND
Feb 25 14:16:13 pfSense dhclient[8461]: DHCPOFFER from 192.168.40.1
Feb 25 14:16:13 pfSense dhclient[8461]: DHCPOFFER already seen.
Feb 25 14:16:15 pfSense dhclient: ARPCHECK
Feb 25 14:16:15 pfSense dhclient[8461]: DHCPREQUEST on em0 to 255.255.255.255 port 67
Feb 25 14:16:15 pfSense dhclient[8461]: DHCPACK from 192.168.40.1
Feb 25 14:16:15 pfSense dhclient: BOUND
Feb 25 14:16:15 pfSense dhclient: Starting add_new_address()
Feb 25 14:16:15 pfSense dhclient: ifconfig em0 inet 192.168.40.254 netmask 255.255.255.0 broadcast 192.168.40.255 
Feb 25 14:16:15 pfSense dhclient: New IP Address (em0): 192.168.40.254
Feb 25 14:16:15 pfSense dhclient: New Subnet Mask (em0): 255.255.255.0
Feb 25 14:16:15 pfSense dhclient: New Broadcast Address (em0): 192.168.40.255
Feb 25 14:16:15 pfSense dhclient: New Routers (em0): 192.168.40.1
Feb 25 14:16:15 pfSense dhclient: Adding new routes to interface: em0
Feb 25 14:16:15 pfSense dhclient: /sbin/route add default 192.168.40.1
Feb 25 14:16:15 pfSense dhclient: Creating resolv.conf
Feb 25 14:16:15 pfSense dhclient[8461]: bound to 192.168.40.254 -- renewal in 129600 seconds.
Feb 25 14:16:20 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 14:16:20 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 14:16:20 pfSense dhcpd: All rights reserved.
Feb 25 14:16:20 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 14:16:20 pfSense dhcpd: Internet Systems Consortium DHCP Server 4.2.5-P1
Feb 25 14:16:20 pfSense dhcpd: Copyright 2004-2013 Internet Systems Consortium.
Feb 25 14:16:20 pfSense dhcpd: All rights reserved.
Feb 25 14:16:20 pfSense dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Feb 25 14:16:20 pfSense dhcpd: Wrote 1 leases to leases file.
Feb 25 14:16:20 pfSense dhcpd: Listening on BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 14:16:20 pfSense dhcpd: Sending on   BPF/ste0/00:19:5b:fb:f0:9a/192.168.1.0/24
Feb 25 14:16:20 pfSense dhcpd: Sending on   Socket/fallback/fallback-net
Feb 25 14:19:11 pfSense dhclient: PREINIT
Feb 25 14:19:11 pfSense dhclient: Starting delete_old_states()
Feb 25 14:19:11 pfSense dhclient: Comparing IPs: Old:  New: 
Feb 25 14:19:11 pfSense dhclient[6968]: DHCPREQUEST on em0 to 255.255.255.255 port 67

Guest

o check_ip.php esta com erro. segue o forum que achei o erro:

https://forum.pfsense.org/index.php?topic=72443.msg395218#msg395218

Troque o seu check_ip por este por este em anexo

check_ipphp.txt

Guest

o check_ip.php esta com erro. segue o forum que achei o erro:

https://forum.pfsense.org/index.php?topic=72443.msg395218#msg395218

Troque o seu check_ip por este por este em anexo@calebepereira@hotmail.com:

o check_ip.php esta com erro. segue o forum que achei o erro:

https://forum.pfsense.org/index.php?topic=72443.msg395218#msg395218

Troque o seu check_ip por este por este em anexo

check_ipphp.txt

marcelloc

Patch aplicado hoje na versão 2.2.1 do pacote.

Obrigado pela contribuição.

rec

Olá, fiz tudo o que pediu o tópico, quando vou tirar o relatório aparece o usuário "#000".

Gostaria que aparecesse o Vouchers que foi acessado.

Obrigado.

marcelloc

veja o que você tem no access.log do squid.

Se o usuario estiver correto, tente usar o sarg no lugar do lightsquid.

rec

@marcelloc:

veja o que você tem no access.log do squid.

Se o usuario estiver correto, tente usar o sarg no lugar do lightsquid.

Grato pelo retorno.

Usuários do Captive Portal usados para teste:


 EhkS4Dc2dvU
 Tq3n2XrnYA73
 nYe8DnfMwUi3
 AuBAsuucW4e3
 jkGWacEBUht

Meu access.log está assim:


1397738795.485    556 192.168.1.122 TCP_MISS/200 8237 GET http://www.atende.net/transparencia/portal.php? - DIRECT/177.11.22.10 text/html
1397738795.905    427 192.168.1.122 TCP_MISS/200 8598 GET http://www.atende.net/transparencia/estrutura/portal_estilo.css - DIRECT/177.11.22.10 text/html
1397738795.991    505 192.168.1.122 TCP_MISS/200 42043 GET http://www.atende.net/transparencia/lib/tri_brasao.php? - DIRECT/177.11.22.10 image/pjpeg
1397738796.053     57 192.168.1.122 TCP_MISS/404 533 GET http://www.atende.net/transparencia/imagens/fundo_rodape.png - DIRECT/177.11.22.10 text/html
1397738820.471    270 192.168.1.122 TCP_MISS/200 102125 GET http://www.uol.com.br/ - DIRECT/200.147.67.142 text/html
1397738820.545    139 192.168.1.122 TCP_MISS/304 359 GET http://jsuol.com/h/2013/min-async.js? - DIRECT/200.221.2.70 -
1397738820.605    118 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/01_alem_horizonte.jpg - DIRECT/200.221.7.95 image/jpeg
1397738820.693    237 192.168.1.122 TCP_MISS/301 605 GET http://click.uol.com.br/? - DIRECT/200.147.3.193 text/html
1397738820.709     94 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/03_em_familia.jpg - DIRECT/200.221.7.95 image/jpeg
1397738820.816     94 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/02_chiquititas.jpg - DIRECT/200.221.7.95 image/jpeg
1397738820.818    363 192.168.1.122 TCP_MISS/200 12975 GET http://h.imguol.com/2013/sprites/icones.v2.png - DIRECT/200.221.7.95 image/png
1397738820.857    406 192.168.1.122 TCP_MISS/200 27725 GET http://h.imguol.com/2013/sprites/selos.v1.png - DIRECT/200.221.7.95 image/png
1397738820.877    262 192.168.1.122 TCP_MISS/304 452 GET http://imguol.com/cursos-online/2014/04/02/logo-uol-1396464902758_169x34.jpg - DIRECT/200.221.7.95 image/jpeg
1397738820.887    436 192.168.1.122 TCP_MISS/200 51413 GET http://h.imguol.com/v2011/bloco-pagina-inicial-ff-modelo2.jpg - DIRECT/200.221.7.95 image/jpeg
1397738820.968    509 192.168.1.122 TCP_MISS/200 44854 GET http://h.imguol.com/2013/sprites/setas.v2.png - DIRECT/200.221.7.95 image/png
1397738820.985    163 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/04_joai_rara.jpg - DIRECT/200.221.7.95 image/jpeg
1397738820.994    171 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/06_pecado_mortal.jpg - DIRECT/200.221.7.95 image/jpeg
1397738821.022    120 192.168.1.122 TCP_MISS/200 2414 GET http://h.imguol.com/2013/sprites/horizontal-fixo-modulo-foto.png - DIRECT/200.221.7.95 image/png
1397738821.074     83 192.168.1.122 TCP_MISS/304 436 GET http://h.imguol.com/todaoferta/todaOferta_100x35.gif - DIRECT/200.221.7.95 image/gif
1397738821.112    657 192.168.1.122 TCP_MISS/200 94169 GET http://h.imguol.com/2013/sprites/widgets.v1.png - DIRECT/200.221.7.95 image/png
1397738821.113    228 192.168.1.122 TCP_MISS/301 601 GET http://click.uol.com.br/? - DIRECT/200.147.99.198 text/html
1397738821.183    207 192.168.1.122 TCP_MISS/200 53459 GET http://h.imguol.com/2013/sprites/times-futebol.v2.png - DIRECT/200.221.7.95 image/png
1397738821.223    183 192.168.1.122 TCP_MISS/304 359 GET http://jsuol.com/p/admanager/j/admanager-homeuol.js? - DIRECT/200.147.67.184 -
1397738821.264     67 192.168.1.122 TCP_MISS/304 433 GET http://h.imguol.com/x.gif? - DIRECT/200.221.7.95 image/gif
1397738821.277    249 192.168.1.122 TCP_MISS/304 436 GET http://bn.imguol.com/1302/uol/relogio/Publicidade.gif - DIRECT/200.221.7.95 image/gif
1397738821.351    658 192.168.1.122 TCP_MISS/302 904 GET http://metrics.uol.com.br/b/ss/uoluolprod/1/H.22.1/s07995155488606? - DIRECT/66.235.138.192 text/plain
1397738821.430    234 192.168.1.122 TCP_MISS/301 599 GET http://click.uol.com.br/? - DIRECT/200.147.3.193 text/html
1397738821.434    573 192.168.1.122 TCP_MISS/304 435 GET http://h.imguol.com/x.gif - DIRECT/200.221.7.95 image/gif
1397738821.448    105 192.168.1.122 TCP_MISS/304 433 GET http://h.imguol.com/x.gif? - DIRECT/200.221.7.95 image/gif
1397738821.468    107 192.168.1.122 TCP_MISS/200 8774 GET http://h.imguol.com/2013/sprites/tempo.v2.png - DIRECT/200.221.7.95 image/png
1397738821.502     48 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1402/ads/27/50542.gif - DIRECT/200.221.7.95 image/gif
1397738821.545     84 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/22/51577.gif - DIRECT/200.147.68.8 image/gif
1397738821.561     54 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/88/51488.gif - DIRECT/200.221.7.95 image/gif
1397738821.571    108 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1403/ads/77/50938.gif - DIRECT/200.221.7.95 image/gif
1397738821.594     81 192.168.1.122 TCP_MISS/304 432 GET http://h.imguol.com/x.gif? - DIRECT/200.221.7.95 image/gif
1397738821.607    128 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1403/ads/166/50886.gif - DIRECT/200.147.68.8 image/gif
1397738821.617    136 192.168.1.122 TCP_MISS/304 424 GET http://imguol.com/admanager/1404/ads/26/51631.gif - DIRECT/200.221.7.95 image/gif
1397738821.629    139 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/144/51359.gif - DIRECT/200.147.68.8 image/gif
1397738821.642     94 192.168.1.122 TCP_MISS/200 2999 GET http://imguol.com/admanager/1404/ads/168/51688.gif - DIRECT/200.147.68.8 image/gif
1397738821.652     88 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/68/51609.gif - DIRECT/200.221.7.95 image/gif
1397738821.667     92 192.168.1.122 TCP_MISS/200 3619 GET http://imguol.com/admanager/1403/ads/166/50882.gif - DIRECT/200.221.7.95 image/gif
1397738821.678     68 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1401/ads/35/49874.gif - DIRECT/200.147.68.8 image/gif
1397738824.157   3153 192.168.1.122 TCP_MISS/304 358 GET http://tm.uol.com.br/h/homeuol.js? - DIRECT/200.221.2.83 -
1397738824.181   3093 192.168.1.122 TCP_MISS/301 605 GET http://click.uol.com.br/? - DIRECT/200.221.7.75 text/html
1397738824.236     48 192.168.1.122 TCP_MISS/304 432 GET http://h.imguol.com/x.gif? - DIRECT/200.221.7.95 image/gif
1397738824.280     56 192.168.1.122 TCP_MISS/304 435 GET http://bn.imguol.com/1301/uol/relogio/n6.gif - DIRECT/200.221.7.95 image/gif
1397738824.335    106 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1403/ads/21/50845.gif - DIRECT/200.147.68.8 image/gif
1397738824.335    105 192.168.1.122 TCP_MISS/304 436 GET http://imguol.com/admanager/1307/ads/150/46505.gif - DIRECT/200.221.7.95 image/gif
1397738824.335    105 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1402/ads/154/46512.gif - DIRECT/200.221.7.95 image/gif
1397738824.336    106 192.168.1.122 TCP_MISS/304 436 GET http://imguol.com/admanager/1307/ads/155/46509.gif - DIRECT/200.147.68.8 image/gif
1397738824.336     97 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/152/46517.gif - DIRECT/200.147.68.8 image/gif
1397738824.421    196 192.168.1.122 TCP_MISS/304 435 GET http://bn.imguol.com/1301/uol/relogio/n5.gif - DIRECT/200.147.68.8 image/gif
1397738824.421    196 192.168.1.122 TCP_MISS/304 435 GET http://bn.imguol.com/1301/uol/relogio/n0.gif - DIRECT/200.221.7.95 image/gif
1397738824.421    137 192.168.1.122 TCP_MISS/304 425 GET http://imguol.com/admanager/1402/ads/151/47059.gif - DIRECT/200.221.7.95 image/gif
1397738824.495    155 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/143/50760.gif - DIRECT/200.147.68.8 image/gif
1397738824.495    155 192.168.1.122 TCP_MISS/304 452 GET http://imguol.com/admanager/1310/ads/153/46513.gif - DIRECT/200.147.68.8 image/gif
1397738824.495    148 192.168.1.122 TCP_MISS/304 437 GET http://bn.imguol.com/1302/uol/relogio/Relogio_1.gif - DIRECT/200.221.7.95 image/gif
1397738824.784    556 192.168.1.122 TCP_MISS/200 665 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1397738826.038    678 192.168.1.122 TCP_MISS/200 2755 GET http://ia.nspmotion.com/delivery/? - DIRECT/65.99.198.181 application/x-javascript
1397738826.338    119 192.168.1.122 TCP_MISS/304 436 GET http://imguol.com/admanager/1308/ads/150/46506.gif - DIRECT/200.147.68.8 image/gif
1397738826.338    119 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1402/ads/154/46521.gif - DIRECT/200.147.68.8 image/gif
1397738826.338    116 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/152/49350.gif - DIRECT/200.221.7.95 image/gif
1397738826.338    116 192.168.1.122 TCP_MISS/304 436 GET http://imguol.com/admanager/1309/ads/151/47213.gif - DIRECT/200.221.7.95 image/gif
1397738826.342    120 192.168.1.122 TCP_MISS/200 3090 GET http://imguol.com/admanager/1307/ads/155/46511.gif - DIRECT/200.221.7.95 image/gif
1397738826.365    143 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1401/ads/153/46515.gif - DIRECT/200.147.68.8 image/gif
1397738826.519    177 192.168.1.122 TCP_MISS/304 452 GET http://imguol.com/admanager/1310/ads/153/46514.gif - DIRECT/200.221.7.95 image/gif
1397738826.664    547 192.168.1.122 TCP_MISS/302 806 GET http://ia.nspmotion.com/tracking/? - DIRECT/65.99.198.181 text/html
1397738826.681    467 192.168.1.122 TCP_MISS/200 750 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1397738826.693    479 192.168.1.122 TCP_MISS/200 642 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1397738827.920    593 192.168.1.122 TCP_MISS/302 978 GET http://adxhm.d.chango.com/m/ax? - DIRECT/173.192.202.134 text/html
1397738829.783    432 192.168.1.122 TCP_MISS/200 825 GET http://ia.nspmotion.com/advKey/? - DIRECT/65.99.198.181 text/html
1397738891.678    683 192.168.1.122 TCP_MISS/200 2969 GET http://www.atende.net/transparencia/portal.php? - DIRECT/177.11.22.10 text/html
1397738892.126    787 192.168.1.122 TCP_MISS/200 2969 GET http://www.atende.net/transparencia/portal.php? - DIRECT/177.11.22.10 text/html
1397738892.678    615 192.168.1.122 TCP_MISS/200 8240 GET http://www.atende.net/transparencia/portal.php? - DIRECT/177.11.22.10 text/html
1397738892.857    208 192.168.1.122 TCP_MISS/200 8601 GET http://www.atende.net/transparencia/estrutura/portal_estilo.css - DIRECT/177.11.22.10 text/html
1397738893.011      0 192.168.1.122 TCP_NEGATIVE_HIT/404 544 GET http://www.atende.net/transparencia/imagens/fundo_rodape.png - NONE/- text/html
1397738893.588    934 192.168.1.122 TCP_MISS/200 42046 GET http://www.atende.net/transparencia/lib/tri_brasao.php? - DIRECT/177.11.22.10 image/pjpeg
1397738895.507   1036 192.168.1.122 TCP_MISS/200 14959 GET http://www.arcobrasil.com/ - DIRECT/67.228.47.102 text/html
1397738896.182    482 192.168.1.122 TCP_MISS/200 5459 GET http://i594.photobucket.com/albums/tt23/neoandersonn/batepapo.jpg - DIRECT/207.123.45.126 image/jpeg
1397738896.328    776 192.168.1.122 TCP_MISS/200 10311 GET http://www.arcobrasil.com/43-ltr.css - DIRECT/67.228.47.103 text/css
1397738896.362    729 192.168.1.122 TCP_MISS/200 2125 GET http://illiweb.com/fa/bbtech/folder_big.gif - DIRECT/87.98.188.44 image/gif
1397738896.362    729 192.168.1.122 TCP_MISS/200 1018 GET http://illiweb.com/fa/bbtech/icon_mini_register_en.gif - DIRECT/87.98.188.44 image/gif
1397738896.434    801 192.168.1.122 TCP_MISS/200 609 GET http://illiweb.com/fa/bbtech/icon_latest_reply.gif - DIRECT/87.98.188.44 image/gif
1397738896.452    819 192.168.1.122 TCP_MISS/200 34293 GET http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js - DIRECT/74.125.131.95 text/javascript
1397738896.529    342 192.168.1.122 TCP_MISS/200 5208 GET http://i594.photobucket.com/albums/tt23/neoandersonn/tecnico.jpg - DIRECT/207.123.45.126 image/jpeg
1397738896.731   1097 192.168.1.122 TCP_MISS/200 16764 GET http://illiweb.com/rsc/43/frm/lang/pt.js - DIRECT/87.98.188.44 application/x-javascript
1397738896.734    929 192.168.1.122 TCP_MISS/200 1982 GET http://i24.servimg.com/u/f24/14/24/38/37/log_in10.jpg - DIRECT/188.165.43.214 image/jpeg
1397738896.734    929 192.168.1.122 TCP_MISS/200 2019 GET http://i24.servimg.com/u/f24/14/24/38/37/home10.jpg - DIRECT/188.165.43.214 image/jpeg
1397738896.734    929 192.168.1.122 TCP_MISS/200 2012 GET http://i24.servimg.com/u/f24/14/24/38/37/calend10.jpg - DIRECT/188.165.43.214 image/jpeg
1397738896.734    929 192.168.1.122 TCP_MISS/200 1988 GET http://i24.servimg.com/u/f24/14/24/38/37/membro10.jpg - DIRECT/188.165.43.214 image/jpeg
1397738896.734    929 192.168.1.122 TCP_MISS/200 1822 GET http://i24.servimg.com/u/f24/14/24/38/37/faq_co10.jpg - DIRECT/188.165.43.214 image/jpeg
1397738896.738    204 192.168.1.122 TCP_MISS/200 5015 GET http://i594.photobucket.com/albums/tt23/neoandersonn/galeria.jpg - DIRECT/207.123.45.126 image/jpeg
1397738896.837    466 192.168.1.122 TCP_MISS/200 5236 GET http://i594.photobucket.com/albums/tt23/neoandersonn/artigos.jpg - DIRECT/192.221.100.126 image/jpeg
1397738896.940    194 192.168.1.122 TCP_MISS/200 1527 GET http://i594.photobucket.com/albums/tt23/neoandersonn/recurvo2.jpg - DIRECT/207.123.45.126 image/jpeg
1397738897.025    185 192.168.1.122 TCP_MISS/200 5277 GET http://i594.photobucket.com/albums/tt23/neoandersonn/acessorios.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.143    394 192.168.1.122 TCP_MISS/200 4993 GET http://i594.photobucket.com/albums/tt23/neoandersonn/flecha2.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.228   1424 192.168.1.122 TCP_MISS/200 51208 GET http://i56.servimg.com/u/f56/14/24/38/37/rubens10.jpg - DIRECT/87.98.185.101 image/jpeg
1397738897.228    483 192.168.1.122 TCP_MISS/200 1613 GET http://i594.photobucket.com/albums/tt23/neoandersonn/compostoe.jpg - DIRECT/198.78.200.126 image/jpeg
1397738897.228    619 192.168.1.122 TCP_MISS/200 1449 GET http://i52.tinypic.com/29o4zg9.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.233    484 192.168.1.122 TCP_MISS/200 4961 GET http://i594.photobucket.com/albums/tt23/neoandersonn/besta1.jpg - DIRECT/207.123.45.126 image/jpeg
1397738897.233    484 192.168.1.122 TCP_MISS/200 5100 GET http://i594.photobucket.com/albums/tt23/neoandersonn/artesanal.jpg - DIRECT/198.78.200.126 image/jpeg
1397738897.234    290 192.168.1.122 TCP_MISS/200 5180 GET http://i594.photobucket.com/albums/tt23/neoandersonn/avatarforumpesca1.jpg - DIRECT/207.123.45.126 image/jpeg
1397738897.251    725 192.168.1.122 TCP_MISS/200 16178 GET http://i59.tinypic.com/5kfrmf.jpg - DIRECT/207.123.45.126 image/jpeg
1397738897.254    224 192.168.1.122 TCP_MISS/200 5243 GET http://i594.photobucket.com/albums/tt23/neoandersonn/caa.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.417    583 192.168.1.122 TCP_MISS/200 4598 GET http://i55.tinypic.com/24xhzr7.jpg - DIRECT/207.123.45.126 image/jpeg
1397738897.420    275 192.168.1.122 TCP_MISS/200 5132 GET http://i594.photobucket.com/albums/tt23/neoandersonn/taxi.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.434    600 192.168.1.122 TCP_MISS/200 2177 GET http://cas.criteo.com/delivery/ajs.php? - DIRECT/74.119.118.71 text/javascript
1397738897.532    292 192.168.1.122 TCP_MISS/200 5059 GET http://i594.photobucket.com/albums/tt23/neoandersonn/youtube.jpg - DIRECT/207.123.45.126 image/jpeg
1397738897.532    289 192.168.1.122 TCP_MISS/200 5090 GET http://i594.photobucket.com/albums/tt23/neoandersonn/links.jpg - DIRECT/198.78.200.126 image/jpeg
1397738897.532    277 192.168.1.122 TCP_MISS/200 5000 GET http://i594.photobucket.com/albums/tt23/neoandersonn/eventos.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.625    369 192.168.1.122 TCP_MISS/200 5360 GET http://i594.photobucket.com/albums/tt23/neoandersonn/desenvolvimento.jpg - DIRECT/198.78.200.126 image/jpeg
1397738897.625    204 192.168.1.122 TCP_MISS/200 5053 GET http://i594.photobucket.com/albums/tt23/neoandersonn/discussao.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.813    569 192.168.1.122 TCP_MISS/200 4913 GET http://i55.tinypic.com/119qsn5.jpg - DIRECT/192.221.100.126 image/jpeg
1397738897.913    373 192.168.1.122 TCP_MISS/200 516 GET http://illiweb.com/fa/vide.gif - DIRECT/87.98.188.44 image/gif
1397738897.920    290 192.168.1.122 TCP_MISS/200 829 GET http://illiweb.com/fa/bbtech/cellpic3.gif - DIRECT/87.98.188.44 image/gif
1397738897.933    303 192.168.1.122 TCP_MISS/200 545 GET http://illiweb.com/fa/bbtech/cellpic1.gif - DIRECT/87.98.188.44 image/gif
1397738898.020    676 192.168.1.122 TCP_MISS/200 4806 GET http://i54.tinypic.com/28a1av5.jpg - DIRECT/192.221.100.126 image/jpeg
1397738898.023    607 192.168.1.122 TCP_MISS/200 1493 GET http://i51.tinypic.com/vq5ppg.jpg - DIRECT/207.123.45.126 image/jpeg
1397738898.025    211 192.168.1.122 TCP_MISS/200 5274 GET http://i594.photobucket.com/albums/tt23/neoandersonn/classi1.jpg - DIRECT/192.221.100.126 image/jpeg
1397738898.127    505 192.168.1.122 TCP_MISS/302 586 GET http://an.z5x.net/tt? - DIRECT/68.67.152.123 text/html
1397738898.128    506 192.168.1.122 TCP_MISS/200 2199 GET http://dis.ny.us.criteo.com/dis/dis.aspx? - DIRECT/74.119.118.85 text/html
1397738898.236    820 192.168.1.122 TCP_MISS/200 5101 GET http://i56.tinypic.com/23k2mb.jpg - DIRECT/198.78.200.126 image/jpeg
1397738898.236    595 192.168.1.122 TCP_MISS/302 914 GET http://sync.mathtag.com/sync/img? - DIRECT/74.121.142.217 image/gif
1397738898.341    422 192.168.1.122 TCP_MISS/200 515 GET http://illiweb.com/fa/empty.gif - DIRECT/87.98.188.44 image/gif
1397738898.341    627 192.168.1.122 TCP_MISS/200 453 GET http://cas.ny.us.criteo.com/delivery/lg.php? - DIRECT/74.119.118.86 image/gif
1397738898.341    419 192.168.1.122 TCP_MISS/200 2151 GET http://illiweb.com/fa/bbtech/whosonline.gif - DIRECT/87.98.188.44 image/gif
1397738898.341    406 192.168.1.122 TCP_MISS/200 2127 GET http://illiweb.com/fa/bbtech/folder_new_big.gif - DIRECT/87.98.188.44 image/gif
1397738898.432    905 192.168.1.122 TCP_MISS/200 15977 GET http://i58.tinypic.com/2jdqoty.jpg - DIRECT/198.78.200.126 image/jpeg
1397738898.435    412 192.168.1.122 TCP_MISS/200 2107 GET http://illiweb.com/fa/bbtech/folder_locked_big.gif - DIRECT/87.98.188.44 image/gif
1397738898.801    663 192.168.1.122 TCP_MISS/200 7498 GET http://ib.adnxs.com/tt? - DIRECT/68.67.152.122 text/html
1397738898.886    545 192.168.1.122 TCP_MISS/302 606 GET http://dis.criteo.com/rex/match.aspx? - DIRECT/74.119.118.94 text/html
1397738898.925    583 192.168.1.122 TCP_MISS/200 1181 GET http://tracking.hotwords.com.br/pixel.jsp? - DIRECT/184.173.97.90 image/gif
1397738899.081    267 192.168.1.122 TCP_MISS/200 1228 GET http://ib.adnxs.com/seg? - DIRECT/68.67.152.122 application/javascript
1397738899.293    207 192.168.1.122 TCP_MISS/200 1116 GET http://ib.adnxs.com/seg? - DIRECT/68.67.152.122 application/javascript
1397738899.442    450 192.168.1.122 TCP_MISS/302 1033 GET http://pixel.mathtag.com/event/img? - DIRECT/173.222.139.95 image/gif
1397738899.538    361 192.168.1.122 TCP_MISS/200 954 GET http://cdn.adnxs.com/ANX_async_usersync.js - DIRECT/189.11.250.90 application/x-javascript
1397738899.793    249 192.168.1.122 TCP_MISS/200 1163 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738900.087    549 192.168.1.122 TCP_MISS/302 1103 GET http://image2.pubmatic.com/AdServer/Pug? - DIRECT/162.248.19.136 text/html
1397738900.399    312 192.168.1.122 TCP_MISS/302 954 GET http://pixel.mathtag.com/event/img? - DIRECT/173.222.139.95 image/gif
1397738900.638    171 192.168.1.122 TCP_MISS/200 1163 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738901.206    524 192.168.1.122 TCP_MISS/200 632 GET http://view.atdmt.com/iaction/adoapn_AppNexusDemoActionTag_1 - DIRECT/157.56.67.169 text/html
1397738901.401    187 192.168.1.122 TCP_MISS/200 1078 GET http://ib.adnxs.com/pxj? - DIRECT/68.67.152.122 image/gif
1397738901.570    356 192.168.1.122 TCP_MISS/200 447 GET http://cdn.atdmt.com/images/pixel.gif - DIRECT/93.184.215.201 image/gif
1397738901.701    153 192.168.1.122 TCP_MISS/200 6267 GET http://cdn.adnxs.com/p/7b/ed/39/33/7bed393307bcc95a9662ee29c5ad70b6.swf? - DIRECT/189.11.250.90 application/x-shockwave-flash
1397738901.753    179 192.168.1.122 TCP_MISS/200 1141 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738902.207    419 192.168.1.122 TCP_MISS/302 501 GET http://cm.ac3.msn.com/CACMSH.ashx? - DIRECT/131.253.40.48 text/html
1397738902.602    358 192.168.1.122 TCP_MISS/200 719 GET http://m.adnxs.com/msftcookiehandler? - DIRECT/68.67.159.177 image/gif
1397738902.868    190 192.168.1.122 TCP_MISS/200 1244 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738903.276    373 192.168.1.122 TCP_MISS/302 723 GET http://aidps.atdmt.com/AI/Api/v1/UserRest.svc/Provider/1AC1C520-232B-4E3D-B0CC-A52AC15EB7D4/User/7831046047512433650/gif? - DIRECT/65.52.108.3 text/html
1397738903.557    246 192.168.1.122 TCP_MISS/200 564 GET http://dps.bing.com/AI/Api/v1/UserRest.svc/Provider/1AC1C520-232B-4E3D-B0CC-A52AC15EB7D4/User/7831046047512433650/gif? - DIRECT/204.79.197.200 image/gif
1397738903.734    172 192.168.1.122 TCP_MISS/200 1211 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738904.166    395 192.168.1.122 TCP_MISS/200 675 GET http://d.chango.com/collector/mapping? - DIRECT/173.192.202.134 image/gif
1397738904.341    170 192.168.1.122 TCP_MISS/200 1217 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738904.895    520 192.168.1.122 TCP_MISS/302 492 GET http://adadvisor.net/adscores/g.pixel? - DIRECT/216.120.27.21 -
1397738905.286    350 192.168.1.122 TCP_MISS/302 865 GET http://d.agkn.com/pixel/2605/? - DIRECT/8.15.229.35 -
1397738905.461    171 192.168.1.122 TCP_MISS/200 1108 GET http://ib.adnxs.com/seg? - DIRECT/68.67.152.122 image/gif
1397738905.697    229 192.168.1.122 TCP_MISS/200 1191 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738906.063   5536 192.168.1.122 TCP_MISS/200 495 GET http://r.openx.net/set? - DIRECT/173.241.242.7 image/gif
1397738906.161    380 192.168.1.122 TCP_MISS/302 638 GET http://sync.apnx.zenoviaexchange.com/usersync2/apnx - DIRECT/8.30.11.13 text/html
1397738906.335    168 192.168.1.122 TCP_MISS/302 740 GET http://sync.mathtag.com/sync/img? - DIRECT/74.121.142.217 image/gif
1397738906.731    357 192.168.1.122 TCP_MISS/302 349 GET http://sync2.dist.us-east.zenoviaexchange.com/usersync3/mediamath/1425/3a4c534b-3cf5-4200-8fcc-324047b5c7a7? - DIRECT/8.30.11.13 text/html
1397738906.911    171 192.168.1.122 TCP_MISS/200 1118 GET http://ib.adnxs.com/setuid? - DIRECT/68.67.152.122 image/gif
1397738907.089    171 192.168.1.122 TCP_MISS/200 1229 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738912.600   5470 192.168.1.122 TCP_MISS/302 714 GET http://rt.legolas-media.com/lgapnx? - DIRECT/75.98.35.20 image/gif
1397738913.139    501 192.168.1.122 TCP_MISS/200 570 GET http://sync.adap.tv/sync? - DIRECT/74.217.78.146 image/gif
1397738913.317    172 192.168.1.122 TCP_MISS/200 1216 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738913.473    111 192.168.1.122 TCP_MISS/200 586 GET http://dpm.demdex.net/ibs:dpid=358&dpuuid=7831046047512433650 - DIRECT/54.232.112.29 image/gif
1397738913.647    171 192.168.1.122 TCP_MISS/200 1238 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 application/javascript
1397738914.202    514 192.168.1.122 TCP_MISS/200 570 GET http://c1.adform.net/serving/cookie/match/? - DIRECT/85.235.246.3 -
1397738914.384    171 192.168.1.122 TCP_MISS/200 690 GET http://ib.adnxs.com/a_usersync? - DIRECT/68.67.152.122 text/html
1397738941.595    474 192.168.1.122 TCP_MISS/200 14945 GET http://www.arcobrasil.com/ - DIRECT/67.228.47.103 text/html
1397738941.803    179 192.168.1.122 TCP_MISS/304 308 GET http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js - DIRECT/74.125.131.95 -
1397738941.913    289 192.168.1.122 TCP_MISS/304 418 GET http://i56.servimg.com/u/f56/14/24/38/37/rubens10.jpg - DIRECT/87.98.185.101 -
1397738941.921    296 192.168.1.122 TCP_MISS/304 418 GET http://illiweb.com/rsc/43/frm/lang/pt.js - DIRECT/87.98.188.44 -
1397738941.933    306 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://illiweb.com/fa/bbtech/icon_mini_register_en.gif - DIRECT/87.98.188.44 -
1397738941.953    326 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://illiweb.com/fa/bbtech/folder_big.gif - DIRECT/87.98.188.44 -
1397738941.960    332 192.168.1.122 TCP_REFRESH_HIT/304 415 GET http://illiweb.com/fa/bbtech/icon_latest_reply.gif - DIRECT/87.98.188.44 -
1397738941.978    350 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/batepapo.jpg - DIRECT/207.123.45.126 -
1397738942.105    472 192.168.1.122 TCP_REFRESH_HIT/304 417 GET http://www.arcobrasil.com/43-ltr.css - DIRECT/67.228.47.104 -
1397738942.156    174 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/galeria.jpg - DIRECT/207.123.45.126 -
1397738942.165    541 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://i24.servimg.com/u/f24/14/24/38/37/home10.jpg - DIRECT/188.165.43.214 -
1397738942.190    563 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://i24.servimg.com/u/f24/14/24/38/37/faq_co10.jpg - DIRECT/188.165.43.214 -
1397738942.203    576 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://i24.servimg.com/u/f24/14/24/38/37/membro10.jpg - DIRECT/188.165.43.214 -
1397738942.223    596 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://i24.servimg.com/u/f24/14/24/38/37/calend10.jpg - DIRECT/188.165.43.214 -
1397738942.244    618 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://i24.servimg.com/u/f24/14/24/38/37/log_in10.jpg - DIRECT/188.165.43.214 -
1397738942.254    337 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/tecnico.jpg - DIRECT/192.221.100.126 -
1397738942.267    329 192.168.1.122 TCP_MISS/304 354 GET http://i59.tinypic.com/5kfrmf.jpg - DIRECT/192.221.100.126 -
1397738942.313    354 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/artigos.jpg - DIRECT/198.78.200.126 -
1397738942.348    175 192.168.1.122 TCP_REFRESH_HIT/304 352 GET http://i594.photobucket.com/albums/tt23/neoandersonn/recurvo2.jpg - DIRECT/207.123.45.126 -
1397738942.373    408 192.168.1.122 TCP_MISS/200 1449 GET http://i52.tinypic.com/29o4zg9.jpg - DIRECT/198.78.200.126 image/jpeg
1397738942.416    156 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/artesanal.jpg - DIRECT/192.221.100.126 -
1397738942.435    274 192.168.1.122 TCP_REFRESH_HIT/304 415 GET http://illiweb.com/fa/vide.gif - DIRECT/87.98.188.44 -
1397738942.489    172 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/acessorios.jpg - DIRECT/198.78.200.126 -
1397738942.512    304 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/besta1.jpg - DIRECT/192.221.100.126 -
1397738942.537    182 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/avatarforumpesca1.jpg - DIRECT/207.123.45.126 -
1397738942.541    389 192.168.1.122 TCP_MISS/200 1891 GET http://cas.criteo.com/delivery/ajs.php? - DIRECT/74.119.118.71 text/javascript
1397738942.550    354 192.168.1.122 TCP_REFRESH_HIT/304 352 GET http://i594.photobucket.com/albums/tt23/neoandersonn/compostoe.jpg - DIRECT/207.123.45.126 -
1397738942.567    339 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/flecha2.jpg - DIRECT/198.78.200.126 -
1397738942.579    158 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/caa.jpg - DIRECT/192.221.100.126 -
1397738942.636    388 192.168.1.122 TCP_MISS/200 4598 GET http://i55.tinypic.com/24xhzr7.jpg - DIRECT/198.78.200.126 image/jpeg
1397738942.669    172 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/taxi.jpg - DIRECT/198.78.200.126 -
1397738942.676    404 192.168.1.122 TCP_MISS/200 4806 GET http://i54.tinypic.com/28a1av5.jpg - DIRECT/198.78.200.126 image/jpeg
1397738942.676    161 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/youtube.jpg - DIRECT/192.221.100.126 -
1397738942.733    177 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/links.jpg - DIRECT/207.123.45.126 -
1397738942.746    164 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/desenvolvimento.jpg - DIRECT/192.221.100.126 -
1397738942.752    177 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/eventos.jpg - DIRECT/198.78.200.126 -
1397738942.773    397 192.168.1.122 TCP_MISS/200 5141 GET http://i56.tinypic.com/23k2mb.jpg - DIRECT/207.123.45.126 image/jpeg
1397738942.806    365 192.168.1.122 TCP_MISS/200 1493 GET http://i51.tinypic.com/vq5ppg.jpg - DIRECT/192.221.100.126 image/jpeg
1397738942.858    177 192.168.1.122 TCP_MISS/302 940 GET http://sync.mathtag.com/sync/img? - DIRECT/74.121.142.217 image/gif
1397738942.901    353 192.168.1.122 TCP_MISS/302 586 GET http://an.z5x.net/tt? - DIRECT/68.67.152.187 text/html
1397738942.916    177 192.168.1.122 TCP_REFRESH_HIT/304 353 GET http://i594.photobucket.com/albums/tt23/neoandersonn/discussao.jpg - DIRECT/207.123.45.126 -
1397738942.941    401 192.168.1.122 TCP_MISS/200 4913 GET http://i55.tinypic.com/119qsn5.jpg - DIRECT/207.123.45.126 image/jpeg
1397738942.941    185 192.168.1.122 TCP_REFRESH_HIT/304 367 GET http://i594.photobucket.com/albums/tt23/neoandersonn/classi1.jpg - DIRECT/198.78.200.126 -
1397738942.951    278 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://illiweb.com/fa/bbtech/cellpic3.gif - DIRECT/87.98.188.44 -
1397738942.966    324 192.168.1.122 TCP_MISS/200 453 GET http://cas.ny.us.criteo.com/delivery/lg.php? - DIRECT/74.119.118.86 image/gif
1397738942.978    297 192.168.1.122 TCP_REFRESH_HIT/304 415 GET http://illiweb.com/fa/bbtech/cellpic1.gif - DIRECT/87.98.188.44 -
1397738943.042    266 192.168.1.122 TCP_REFRESH_HIT/304 415 GET http://illiweb.com/fa/empty.gif - DIRECT/87.98.188.44 -
1397738943.083    274 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://illiweb.com/fa/bbtech/whosonline.gif - DIRECT/87.98.188.44 -
1397738943.202    341 192.168.1.122 TCP_MISS/302 606 GET http://dis.criteo.com/rex/match.aspx? - DIRECT/74.119.118.94 text/html
1397738943.302    550 192.168.1.122 TCP_MISS/200 16017 GET http://i58.tinypic.com/2jdqoty.jpg - DIRECT/207.123.45.126 image/jpeg
1397738943.317    405 192.168.1.122 TCP_MISS/200 7572 GET http://ib.adnxs.com/tt? - DIRECT/68.67.152.69 text/html
1397738943.461     97 192.168.1.122 TCP_MISS/200 6267 GET http://cdn.adnxs.com/p/7b/ed/39/33/7bed393307bcc95a9662ee29c5ad70b6.swf? - DIRECT/189.11.250.90 application/x-shockwave-flash
1397738943.474    550 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://illiweb.com/fa/bbtech/folder_new_big.gif - DIRECT/188.165.33.165 -
1397738943.498    171 192.168.1.122 TCP_MISS/200 1313 GET http://ib.adnxs.com/seg? - DIRECT/68.67.152.69 application/javascript
1397738943.508    564 192.168.1.122 TCP_REFRESH_HIT/304 416 GET http://illiweb.com/fa/bbtech/folder_locked_big.gif - DIRECT/188.165.43.214 -
1397738943.674    163 192.168.1.122 TCP_MISS/200 1201 GET http://ib.adnxs.com/seg? - DIRECT/68.67.152.69 application/javascript
1397738943.777    572 192.168.1.122 TCP_MISS/302 944 GET http://pixel.mathtag.com/event/img? - DIRECT/173.222.139.95 image/gif
1397738944.262    508 192.168.1.122 TCP_MISS/200 8240 GET http://www.atende.net/transparencia/portal.php? - DIRECT/177.11.22.10 text/html
1397738944.830    573 192.168.1.122 TCP_MISS/200 8601 GET http://www.atende.net/transparencia/estrutura/portal_estilo.css - DIRECT/177.11.22.10 text/html
1397738944.891    628 192.168.1.122 TCP_MISS/200 42046 GET http://www.atende.net/transparencia/lib/tri_brasao.php? - DIRECT/177.11.22.10 image/pjpeg
1397738944.912      0 192.168.1.122 TCP_NEGATIVE_HIT/404 544 GET http://www.atende.net/transparencia/imagens/fundo_rodape.png - NONE/- text/html
1397739056.375    258 192.168.1.122 TCP_MISS/200 101583 GET http://www.uol.com.br/ - DIRECT/200.221.2.45 text/html
1397739056.543    105 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/04_joai_rara.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.556    118 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/05_malhacao.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.573    142 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/v2011/bloco-pagina-inicial-ff-modelo2.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.588    157 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/03_em_familia.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.602    171 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/01_alem_horizonte.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.617    186 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/02_chiquititas.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.625    187 192.168.1.122 TCP_MISS/304 362 GET http://jsuol.com/h/2013/min-async.js? - DIRECT/200.147.67.184 -
1397739056.647    198 192.168.1.122 TCP_MISS/301 608 GET http://click.uol.com.br/? - DIRECT/200.147.3.193 text/html
1397739056.656    110 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/17massa58-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.704    145 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17salvador4h.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.743    167 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17celularh.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.750    158 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17guguh.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.764    157 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/17tapanacara58-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.790    169 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/1404/17dinamarques2h.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.817    110 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/17masp58-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.838     90 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17walter2h.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.846     93 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/igreja17lf.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.874    275 192.168.1.122 TCP_MISS/301 604 GET http://click.uol.com.br/? - DIRECT/200.147.99.198 text/html
1397739056.877    111 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/1404/pit17lf.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.898    108 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16golcruzeiron.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.918     98 192.168.1.122 TCP_MISS/304 437 GET http://h.imguol.com/todaoferta/todaOferta_100x35.gif - DIRECT/200.147.68.8 image/gif
1397739056.930    570 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739056.932    194 192.168.1.122 TCP_MISS/304 362 GET http://jsuol.com/p/admanager/j/admanager-homeuol.js? - DIRECT/200.221.2.70 -
1397739056.945    104 192.168.1.122 TCP_MISS/304 436 GET http://h.imguol.com/x.gif? - DIRECT/200.147.68.8 image/gif
1397739056.946    586 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739056.953    103 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/michael17lf.jpg - DIRECT/200.147.68.8 image/jpeg
1397739056.972    612 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739056.982    105 192.168.1.122 TCP_MISS/304 438 GET http://h.imguol.com/x.gif? - DIRECT/200.147.68.8 image/gif
1397739057.006    108 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/06_pecado_mortal.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.026    288 192.168.1.122 TCP_MISS/200 516 GET http://geoip.home.uol.com/states/pr/arapoti.js - DIRECT/200.221.2.66 application/javascript
1397739057.028    108 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/17tapanacara-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.072    232 192.168.1.122 TCP_MISS/301 608 GET http://click.uol.com.br/? - DIRECT/200.221.7.75 text/html
1397739057.097    148 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/17masp300-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.103    146 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17dinamarquesh.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.148    159 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/17massa300-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.169    139 192.168.1.122 TCP_MISS/304 436 GET http://h.imguol.com/x.gif - DIRECT/200.147.68.8 image/gif
1397739057.177    519 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/1404/17salvador3h.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.198    122 192.168.1.122 TCP_MISS/304 438 GET http://h.imguol.com/x.gif? - DIRECT/200.147.68.8 image/gif
1397739057.211    110 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/16ber_m.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.224    116 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/17cranio-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.262    111 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/17xmen-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.297    368 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739057.325    316 192.168.1.122 TCP_MISS/301 602 GET http://click.uol.com.br/? - DIRECT/200.147.3.193 text/html
1397739057.331    157 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17cinemah.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.337    389 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739057.341    160 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/1404/17atrizh.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.356    155 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/1404/17ach.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.368    155 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/16aviagem-rn.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.380    412 192.168.1.122 TCP_MISS/304 436 GET http://bn.imguol.com/1302/uol/relogio/Publicidade.gif - DIRECT/200.221.7.95 image/gif
1397739057.384    411 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739057.388    159 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17anah.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.399    133 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16carroluxocs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.433     99 192.168.1.122 TCP_MISS/304 436 GET http://h.imguol.com/x.gif? - DIRECT/200.147.68.8 image/gif
1397739057.460    116 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16carrobolhacs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.477    118 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16carrocs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.489    118 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/17neymar-tg.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.495    725 192.168.1.122 TCP_MISS/302 904 GET http://metrics.uol.com.br/b/ss/uoluolprod/1/H.22.1/s07692842504475? - DIRECT/66.235.138.192 text/plain
1397739057.516    125 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17cruzeiroh.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.527    125 192.168.1.122 TCP_MISS/304 452 GET http://h.imguol.com/1404/17rio2h.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.543    208 192.168.1.122 TCP_MISS/304 429 GET http://imguol.com/admanager/1402/ads/35/50379.gif - DIRECT/200.147.68.8 image/gif
1397739057.553    115 192.168.1.122 TCP_MISS/304 450 GET http://h.imguol.com/1404/17snowh.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.563    100 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16tainacs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.579     99 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16makecs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.591    100 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/16cozinhacs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.602    217 192.168.1.122 TCP_MISS/304 430 GET http://imguol.com/admanager/1404/ads/22/51578.gif - DIRECT/200.221.7.95 image/gif
1397739057.612     93 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/16risotocs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.624     94 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16bacalhaucs.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.638     91 192.168.1.122 TCP_MISS/304 431 GET http://imguol.com/admanager/1403/ads/77/50933.gif - DIRECT/200.147.68.8 image/gif
1397739057.667    367 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739057.669     64 192.168.1.122 TCP_MISS/304 430 GET http://imguol.com/admanager/1404/ads/26/51619.gif - DIRECT/200.221.7.95 image/gif
1397739057.676     59 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/16capriles-z.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.688     61 192.168.1.122 TCP_MISS/304 453 GET http://h.imguol.com/1404/16role_p.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.703    365 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739057.707     67 192.168.1.122 TCP_MISS/304 430 GET http://imguol.com/admanager/1404/ads/144/51361.gif - DIRECT/200.147.68.8 image/gif
1397739057.720    162 192.168.1.122 TCP_MISS/304 427 GET http://imguol.com/admanager/1404/ads/59/51686.gif - DIRECT/200.147.68.8 image/gif
1397739057.730    145 192.168.1.122 TCP_MISS/304 431 GET http://imguol.com/admanager/1403/ads/166/50886.gif - DIRECT/200.147.68.8 image/gif
1397739057.746    179 192.168.1.122 TCP_MISS/304 429 GET http://imguol.com/admanager/1404/ads/59/51681.gif - DIRECT/200.221.7.95 image/gif
1397739057.756    369 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739057.775    103 192.168.1.122 TCP_MISS/304 430 GET http://imguol.com/admanager/1404/ads/88/51488.gif - DIRECT/200.221.7.95 image/gif
1397739057.782    104 192.168.1.122 TCP_MISS/304 451 GET http://h.imguol.com/1404/16copa-de-50_p.jpg - DIRECT/200.147.68.8 image/jpeg
1397739057.816    105 192.168.1.122 TCP_MISS/304 429 GET http://imguol.com/admanager/1404/ads/171/51552.gif - DIRECT/200.147.68.8 image/gif
1397739057.833    109 192.168.1.122 TCP_MISS/200 3409 GET http://imguol.com/admanager/1404/ads/68/51691.gif - DIRECT/200.147.68.8 image/gif
1397739057.848    252 192.168.1.122 TCP_MISS/204 223 GET http://imp.ads.imguol.com/view? - DIRECT/200.147.67.185 -
1397739057.854    122 192.168.1.122 TCP_REFRESH_HIT/304 429 GET http://imguol.com/admanager/1403/ads/166/50882.gif - DIRECT/200.147.68.8 image/gif
1397739057.874    125 192.168.1.122 TCP_MISS/200 2396 GET http://imguol.com/admanager/1404/ads/26/51671.gif - DIRECT/200.221.7.95 image/gif
1397739057.933    244 192.168.1.122 TCP_MISS/304 361 GET http://tm.uol.com.br/h/homeuol.js? - DIRECT/200.221.2.83 -
1397739058.012    344 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.056    349 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.133    376 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.307    292 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.353    352 192.168.1.122 TCP_MISS/304 308 GET http://partner.googleadservices.com/gpt/pubads_impl_37.js - DIRECT/173.194.118.249 -
1397739058.360    302 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.446     53 192.168.1.122 TCP_MISS/304 435 GET http://bn.imguol.com/1301/uol/relogio/n6.gif - DIRECT/200.221.7.95 image/gif
1397739058.450    314 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.465     57 192.168.1.122 TCP_MISS/304 431 GET http://imguol.com/admanager/1403/ads/21/50845.gif - DIRECT/200.221.7.95 image/gif
1397739058.471     63 192.168.1.122 TCP_MISS/304 439 GET http://imguol.com/admanager/1307/ads/150/46505.gif - DIRECT/200.147.68.8 image/gif
1397739058.487     79 192.168.1.122 TCP_MISS/304 429 GET http://imguol.com/admanager/1402/ads/154/46512.gif - DIRECT/200.147.68.8 image/gif
1397739058.504    105 192.168.1.122 TCP_MISS/304 438 GET http://bn.imguol.com/1301/uol/relogio/n5.gif - DIRECT/200.147.68.8 image/gif
1397739058.514    114 192.168.1.122 TCP_MISS/304 435 GET http://bn.imguol.com/1301/uol/relogio/n0.gif - DIRECT/200.221.7.95 image/gif
1397739058.529     78 192.168.1.122 TCP_MISS/304 439 GET http://imguol.com/admanager/1307/ads/155/46509.gif - DIRECT/200.147.68.8 image/gif
1397739058.542     74 192.168.1.122 TCP_MISS/304 430 GET http://imguol.com/admanager/1404/ads/152/46517.gif - DIRECT/200.221.7.95 image/gif
1397739058.548     75 192.168.1.122 TCP_MISS/304 431 GET http://imguol.com/admanager/1402/ads/151/47059.gif - DIRECT/200.147.68.8 image/gif
1397739058.565     76 192.168.1.122 TCP_MISS/304 428 GET http://imguol.com/admanager/1404/ads/143/50760.gif - DIRECT/200.147.68.8 image/gif
1397739058.582     75 192.168.1.122 TCP_MISS/200 2742 GET http://imguol.com/admanager/1310/ads/153/46513.gif - DIRECT/200.221.7.95 image/gif
1397739058.591     56 192.168.1.122 TCP_MISS/304 437 GET http://bn.imguol.com/1302/uol/relogio/Relogio_1.gif - DIRECT/200.221.7.95 image/gif
1397739058.604    294 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739058.880    433 192.168.1.122 TCP_MISS/200 645 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1397739059.161     50 192.168.1.122 TCP_MISS/204 223 GET http://imp.ads.imguol.com/view? - DIRECT/200.147.67.185 -
1397739059.721   3171 192.168.1.122 TCP_MISS/304 455 GET http://imguol.com/cursos-online/2014/04/02/logo-uol-1396464902758_169x34.jpg - DIRECT/200.221.7.95 image/jpeg
1397739078.941    100 192.168.1.122 TCP_MISS/200 429 GET http://b.scorecardresearch.com/r? - DIRECT/189.75.165.139 image/gif
1397739079.552    299 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739085.754    295 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739088.010   1179 192.168.1.122 TCP_MISS/200 41431 GET http://pubads.g.doubleclick.net/gampad/ads? - DIRECT/173.194.118.249 text/javascript
1397739088.196    162 192.168.1.122 TCP_MISS/200 1563 GET http://pagead2.googlesyndication.com/pagead/imgad? - DIRECT/173.194.118.57 image/png
1397739088.221    164 192.168.1.122 TCP_MISS/200 1072 GET http://pagead2.googlesyndication.com/pagead/imgad? - DIRECT/173.194.118.57 image/png
1397739088.297    163 192.168.1.122 TCP_MISS/304 335 GET http://pagead2.googlesyndication.com/pagead/osd.js - DIRECT/173.194.118.57 -
1397739088.507    437 192.168.1.122 TCP_MISS/200 2784 GET http://ia.nspmotion.com/delivery/? - DIRECT/65.99.198.181 application/x-javascript
1397739088.654     97 192.168.1.122 TCP_MISS/304 349 GET http://akfs.nspmotion.com/files/core/505631.js - DIRECT/189.75.165.168 application/x-javascript
1397739088.797     77 192.168.1.122 TCP_MISS/304 349 GET http://akfs.nspmotion.com/files/templates/24/123775.js - DIRECT/189.75.165.169 application/x-javascript
1397739089.002     95 192.168.1.122 TCP_MISS/301 602 GET http://click.uol.com.br/? - DIRECT/200.147.99.198 text/html
1397739089.081     75 192.168.1.122 TCP_MISS/304 438 GET http://h.imguol.com/x.gif? - DIRECT/200.221.7.95 image/gif
1397739089.283    343 192.168.1.122 TCP_MISS/304 308 GET http://s0.2mdn.net/879366/flashwrite_1_2.js - DIRECT/173.194.118.123 -
1397739089.370     60 192.168.1.122 TCP_MISS/204 223 GET http://imp.ads.imguol.com/view? - DIRECT/200.147.67.185 -
1397739089.389     83 192.168.1.122 TCP_MISS/304 439 GET http://imguol.com/admanager/1308/ads/150/46506.gif - DIRECT/200.221.7.95 image/gif
1397739089.405     99 192.168.1.122 TCP_MISS/304 431 GET http://imguol.com/admanager/1402/ads/154/46521.gif - DIRECT/200.147.68.8 image/gif
1397739089.439    133 192.168.1.122 TCP_REFRESH_HIT/304 452 GET http://imguol.com/admanager/1307/ads/155/46511.gif - DIRECT/200.221.7.95 image/gif
1397739089.445    134 192.168.1.122 TCP_MISS/304 430 GET http://imguol.com/admanager/1404/ads/152/49350.gif - DIRECT/200.147.68.8 image/gif
1397739089.455    144 192.168.1.122 TCP_MISS/304 436 GET http://imguol.com/admanager/1309/ads/151/47213.gif - DIRECT/200.221.7.95 image/gif
1397739089.457    163 192.168.1.122 TCP_MISS/304 334 GET http://pagead2.googlesyndication.com/pagead/js/lidar.js - DIRECT/173.194.118.57 -
1397739089.467    157 192.168.1.122 TCP_MISS/304 431 GET http://imguol.com/admanager/1401/ads/153/46515.gif - DIRECT/200.147.68.8 image/gif
1397739089.481     89 192.168.1.122 TCP_MISS/304 455 GET http://imguol.com/admanager/1310/ads/153/46514.gif - DIRECT/200.221.7.95 image/gif
1397739089.544    216 192.168.1.122 TCP_MISS/200 1759 GET http://t5.dynad.net/script/? - DIRECT/200.143.16.7 text/javascript
1397739089.639    336 192.168.1.122 TCP_MISS/200 645 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1397739089.687    381 192.168.1.122 TCP_MISS/200 776 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? - DIRECT/63.241.108.124 image/gif
1397739089.893    160 192.168.1.122 TCP_MISS/304 308 GET http://s0.2mdn.net/3254838/300x600_dfa_8mmfacebook_ADIDAS_MALI_2.swf - DIRECT/173.194.118.123 -
1397739090.026    169 192.168.1.122 TCP_MISS/200 6031 GET http://pagead2.googlesyndication.com/pagead/imgad? - DIRECT/173.194.118.57 application/x-shockwave-flash
1397739090.049   1201 192.168.1.122 TCP_MISS/302 809 GET http://ia.nspmotion.com/tracking/? - DIRECT/65.99.198.181 text/html
1397739090.127     71 192.168.1.122 TCP_MISS/304 334 GET http://akfs.nspmotion.com/files/1_1.gif - DIRECT/189.75.165.168 image/gif
1397739090.236    686 192.168.1.122 TCP_MISS/200 39353 GET http://s5.dynad.net/stack/wjfaAqd4E1y3Ssd5mjNE9Tes_uSc4CbwCF4ZqoRqmTk.jpg? - DIRECT/208.115.198.180 image/jpg
1397739090.424    338 192.168.1.122 TCP_MISS/200 24130 GET http://pagead2.googlesyndication.com/pagead/imgad? - DIRECT/173.194.118.57 application/x-shockwave-flash
1397739094.957    298 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.57 image/gif
1397739095.201     72 192.168.1.122 TCP_MISS/304 454 GET http://bn.imguol.com/1305/uol/insercao/closeButton.jpg - DIRECT/200.147.68.8 image/jpeg
1397739095.464    335 192.168.1.122 TCP_MISS/200 39808 GET http://pagead2.googlesyndication.com/pagead/imgad? - DIRECT/173.194.118.57 image/jpeg
1397739105.211     42 192.168.1.122 TCP_MISS/304 354 GET http://akfs.nspmotion.com/files/142/428/14093/creatives/185292/511883.swf - DIRECT/189.75.165.168 application/x-shockwave-flash
1397739105.701    407 192.168.1.122 TCP_MISS/200 873 GET http://ia.nspmotion.com/advKey/? - DIRECT/65.99.198.181 text/html
1397739116.338    490 192.168.1.122 TCP_MISS/200 689 GET http://cm.g.doubleclick.net/push? - DIRECT/173.194.118.218 text/html
1397739116.798    409 192.168.1.122 TCP_MISS/302 722 GET http://sync.tidaltv.com/genericusersync.ashx? - DIRECT/50.16.210.70 text/html
1397739117.104    304 192.168.1.122 TCP_MISS/200 643 GET http://cm.g.doubleclick.net/pixel? - DIRECT/173.194.118.218 image/png
1397739152.606    696 192.168.1.122 TCP_MISS/200 8239 GET http://www.atende.net/transparencia/portal.php? - DIRECT/177.11.22.10 text/html
1397739152.662     53 192.168.1.122 TCP_MISS/304 266 GET http://www.atende.net/transparencia/imagens/loading.gif - DIRECT/177.11.22.10 -
1397739152.702    110 192.168.1.122 TCP_MISS/304 289 GET http://www.atende.net/transparencia/estrutura/portal_jquery.js - DIRECT/177.11.22.10 -
1397739152.712    120 192.168.1.122 TCP_MISS/304 290 GET http://www.atende.net/transparencia/estrutura/portal_funcao.js - DIRECT/177.11.22.10 -
1397739152.733    140 192.168.1.122 TCP_MISS/304 290 GET http://www.atende.net/transparencia/estrutura/portal_tooltip.js - DIRECT/177.11.22.10 -
1397739152.743    151 192.168.1.122 TCP_MISS/304 289 GET http://www.atende.net/transparencia/estrutura/portal_drag.js - DIRECT/177.11.22.10 -
1397739152.756    164 192.168.1.122 TCP_MISS/200 8601 GET http://www.atende.net/transparencia/estrutura/portal_estilo.css - DIRECT/177.11.22.10 text/html
1397739152.772     63 192.168.1.122 TCP_MISS/304 266 GET http://www.atende.net/transparencia/imagens/titulo_transparencia.png - DIRECT/177.11.22.10 -
1397739152.782     64 192.168.1.122 TCP_MISS/304 266 GET http://www.atende.net/transparencia/imagens/transparencia_acesso_leis.png - DIRECT/177.11.22.10 -
1397739152.792     54 192.168.1.122 TCP_MISS/304 266 GET http://www.atende.net/transparencia/imagens/transparencia_fechar.png - DIRECT/177.11.22.10 -
1397739152.812     66 192.168.1.122 TCP_MISS/304 266 GET http://www.atende.net/transparencia/imagens/imagem_wtr_login_ipm.png - DIRECT/177.11.22.10 -
1397739152.893     62 192.168.1.122 TCP_MISS/304 265 GET http://www.atende.net/transparencia/imagens/error.gif - DIRECT/177.11.22.10 -
1397739152.893     61 192.168.1.122 TCP_MISS/304 266 GET http://www.atende.net/transparencia/imagens/alert.gif - DIRECT/177.11.22.10 -
1397739152.910     73 192.168.1.122 TCP_MISS/404 536 GET http://www.atende.net/transparencia/imagens/fundo_rodape.png - DIRECT/177.11.22.10 text/html
1397739153.286    611 192.168.1.122 TCP_MISS/200 42046 GET http://www.atende.net/transparencia/lib/tri_brasao.php? - DIRECT/177.11.22.10 image/pjpeg
1397739153.357     54 192.168.1.122 TCP_MISS/200 2629 GET http://www.atende.net/favicon.ico - DIRECT/177.11.22.10 text/plain
1397739181.070      0 192.168.1.1 TCP_MISS/200 736 GET cache_object://localhost/active_requests - NONE/- text/plain
1397739196.307    126 192.168.1.105 TCP_MISS/200 308 GET http://www.itools.info/TSoOgTp0g9crhd/7UimsHnDrQxNvw/TpQwHjImyHYec9.html - DIRECT/173.222.251.248 text/html
1397739333.174    554 192.168.1.122 TCP_MISS/200 230 POST http://cache2.pandasecurity.com/ - DIRECT/91.216.218.207 application/octet-stream
1397739351.221    126 192.168.1.105 TCP_MISS/200 308 GET http://www.appleiphonecell.com/8jq97Azq/KN99eMpQ.html - DIRECT/173.222.251.248 text/html
1397739354.421    249 192.168.1.122 TCP_MISS/200 102170 GET http://www.uol.com.br/ - DIRECT/200.147.67.142 text/html
1397739354.768    241 192.168.1.122 TCP_MISS/304 362 GET http://jsuol.com/h/2013/min-async.js? - DIRECT/200.147.67.184 -
1397739354.796    230 192.168.1.122 TCP_MISS/304 455 GET http://imguol.com/cursos-online/2014/04/02/logo-uol-1396464902758_169x34.jpg - DIRECT/200.221.7.95 image/jpeg
1397739354.818    276 192.168.1.122 TCP_MISS/301 608 GET http://click.uol.com.br/? - DIRECT/200.221.7.75 text/html
1397739354.827    280 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/v2011/bloco-pagina-inicial-ff-modelo2.jpg - DIRECT/200.147.68.8 image/jpeg
1397739354.844    297 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/05_malhacao.jpg - DIRECT/200.147.68.8 image/jpeg
1397739354.850    507 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.217 image/gif
1397739354.856    308 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/03_em_familia.jpg - DIRECT/200.147.68.8 image/jpeg
1397739354.869    526 192.168.1.122 TCP_MISS/414 1741 GET http://pagead2.googlesyndication.com/pagead/gen_204? - DIRECT/173.194.118.217 text/html
1397739354.869    491 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.217 image/gif
1397739354.874    326 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/04_joai_rara.jpg - DIRECT/200.147.68.8 image/jpeg
1397739354.880    333 192.168.1.122 TCP_MISS/304 454 GET http://h.imguol.com/2013/sprites/teste-ab/novelas/02_chiquititas.jpg - DIRECT/200.147.68.8 image/jpeg
1397739354.883    504 192.168.1.122 TCP_MISS/200 611 GET http://pagead2.googlesyndication.com/activeview? - DIRECT/173.194.118.217 image/gif

No LightSquid aparece o IP e não o usuário do Voucher, preciso do Voucher. Sabe o que pode ser?

Grato!

marcelloc

Sua configuração/integração não está correta.

Nenhum usuário aparece no log do squid.

Verifique as opções de integração e as acls de whitelist(sem autenticação)