找回密码
 注册
查看: 582|回复: 0

squid能根据cache文件反查url吗

[复制链接]
发表于 2006-9-2 09:23:57 | 显示全部楼层 |阅读模式
[root@proxy tmp]# f-prot /var/spool/squid/
Virus scanning report  -  2 September 2006 @ 8:37

F-PROT ANTIVIRUS
Program version: 4.6.6
Engine version: 3.16.14

VIRUS SIGNATURE FILES
SIGN.DEF created 31 August 2006
SIGN2.DEF created 31 August 2006
MACRO.DEF created 31 August 2006

Search: /var/spool/squid/
Action: Report only
Files: "Dumb" scan of all files
Switches: -ARCHIVE -PACKED -SERVER

/var/spool/squid/02/3C/00023CA9->(Packed)->(Packed)  Infection: Possibly a new variant of W32/Downloader-Sml-based!Maximus
/var/spool/squid/02/3C/00023CAC->(Packed)->(Packed)  Infection: Possibly a new variant of W32/Threat-IKNP-based!Maximus
/var/spool/squid/02/7F/00027FAA->(Packed)->(Packed)  Infection: Possibly a new variant of W32/Threat-IKNP-based!Maximus
/var/spool/squid/02/D6/0002D66B->(Packed)->(Packed)  Infection: Possibly a new variant of W32/Threat-IKNP-based!Maximus
/var/spool/squid/02/D6/0002D66B->(exefile)->(Packed)->(Packed)  Infection: Possibly a new variant of W32/Threat-IKNP-based!Maximus
/var/spool/squid/01/A1/0001A1AB  Infection: Possibly a new variant of W32/Downloader-Sml-based!Maximus
/var/spool/squid/03/59/000359AE  could be infected with an unknown virus
/var/spool/squid/03/59/000359AE->(exefile)  could be infected with an unknown virus
/var/spool/squid/03/43/000343ED->(Packed)->(Packed)  Infection: Possibly a new variant of W32/Threat-IKNP-based!Maximus

Results of virus scanning:

Files: 262145
MBRs: 0
Boot sectors: 0
Objects scanned: 262801
Infected: 0
Suspicious: 9
Disinfected: 0
Deleted: 0
Renamed: 0

Time: 11:25
[root@proxy tmp]#
我用f-prot扫描squid缓存结果如上,我想查出/var/spool/squid/02/3C/00023CA9等是从那个url来的,然后用acl把这url屏蔽了。不知能不能做到.
您需要登录后才可以回帖 登录 | 注册

本版积分规则

GMT+8, 2025-2-12 13:53 , Processed in 0.039929 second(s), 15 queries .

© 2001-2025 Discuz! Team. Powered by Discuz! X3.5.

快速回复 返回顶部 返回列表