AA Device Sevices AADS Utility Server AADSUS HTTP Log 1

[wallot]

Hi folks,

I'm on the AADS utility server and want to see the IP address of the endpoint doing HTTP put and get. What the log shows is a local host IP of 127.0.0.1.

Is there any way to get the log to record the actual IP address of the phone?

I have a lot of traffic - 3000 plus IP sets - and it is rather cumbersome to try and see what end point is doing what in the log.

The phone backups are OK because of course the log shows the extension number in the file name but the other files are the issue:

127.0.0.1 - - [20/Aug/2020:14:44:57 -0400] "GET /S9608_11_HALKRR6_8_3_04.bin HTTP/1.1" 200 50844964 "-" "AVAYA/SPICE/v6.6+(9611)/Std/02"
127.0.0.1 - - [20/Aug/2020:14:44:43 -0400] "GET /46xxsettings.txt HTTP/1.1" 200 717517 "-" "AVAYA/SPICE/v6.6+(9611)/Std/02"

Thank you

 

[kyle555]

Sounds like they redirected it to localhost on a private port.

Without hacking up the firewall, probably not.

Use your own HTTP server

 

[jimbojimbo]

You'll find it in the nginx access log.

 

[wallot]

Thank you, however the nginx access log is empty.

 

[kyle555]

I'll poke around.

I feel like it *COULD* be right if they redirect a listening port on the LAN IP to localhost, but I believe jimbo is right insofar as the service redirecting it might log it.

If it's right in the firewall, I'm not sure it could be done unless you hacked the firewall and didn't redirect and made the US listen on the LAN IP and not localhost.

As in, compare netstat on a 7.x straight US vs a 8.x AADS/US and reconfigure the way you want.

Or, get your own HTTP

 

[jimbojimbo]

The nginx log is not where you expect it. 'cdto logs' then cd to nginx.

 

[wallot]

This last was perfect jimbojimbo. No need to make any modifications to the firewall. Thanks everyone for your advice!