How to log contents of accessed websites?

[ahkow]

I would like to log contents of network traffic, meaning I want to see the exact webpages viewed by users.
I figure that I can put a "Run Process" item in a policy and pass the network contents to the process to log. But I can't find any Symbol related to contents.

[adrien]

Hi

only headers are available in the proxy events. Since the content may be even GB of data, it's too much to put through the event framework. So the events are fired once all the headers of a request or response are received.

If you need to see the content, you have several options.

1. use wireshark or similar to packet capture port 80.
2. write an HTTP protocol filter plugin for WinGate. These get access to the raw data.
3. Use a browser to go to the sites based on log entries. This presumes however that you would see the same as the user which may not happen on private sites, where there is a login.

Regards

Adrien