I am using squid as proxy in a small setup having one internal NIC and one external NIC. Now using tcp, I can capture traffic on either side but there is some problem that I am facing. If I capture traffic of external NIC then it gave only external NIC IP as client IP and if I capture traffic from internal then destination IP is always SQUID internal IP. What I want is actual client and server IP. How I can do it?My OS is CentOS 7.2
How to capture SQUID proxy traffic via tcpdump with actual information?
proxy;tcpdump;squid;http proxy