[liberationtech] Censorship hardware - BLUECOAT IN SYIA

[The Doctor]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/03/2012 04:15 PM, Pierre Romera wrote:

> Is there someone who knows which kind of data are generated by
> such equipment (ProxySG xxxx) ? If so, how can we read it ?
> Thanks.

Here is what one of the entries in the logs look like:

2011-07-25 00:00:00
113
<IP address of system that triggered a rule> - - -

OBSERVED "unavailable"
http://ads.handycafe.com/adv.php?l=sy&rndID=34664 200 TCP_NC_MISS
GET text/html;%20charset=utf-8 http adserving.cpxinteractive.com 80
/st ?ad_type=iframe&ad_size=160x600&section=306277 -
"Mozilla/4.0 (Windows NT 6.1); Gecko/20100101 Firefox/4.0.1; 10;
Windows NT 6.1; SV1; handyCafeCln/3.3.21)" <IP address of Bluecoat>
1025 458 -

If you search for "Telecomix blue coat logs" you'll find sagans of
other examples.

- -- 
The Doctor [412/724/301/703] [ZS (MED)]
Developer, Project Byzantium: http://project-byzantium.org/

PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F  DD89 3BD8 FF2B 807B 17C1
WWW: https://drwho.virtadpt.net/

"We could be readin' a book." --Huey, _The Boondocks_

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlC9GtcACgkQO9j/K4B7F8Gh/wCg7w+tikh3B2Ed/cy3gdlxH/XS
2rEAoKmpmLxWUSGbAhb26OeLBk2Ix5BL
=p1j0
-----END PGP SIGNATURE-----