# Logging domains visited

**URL:** <https://community.ipfire.org/t/logging-domains-visited/15521>\
**Category:** Network\
**Created:** [24 February 2026 08:51 UTC](https://community.ipfire.org/t/logging-domains-visited/15521 "2026-02-24T08:51:37Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sundancer](https://community.ipfire.org/user_avatar/community.ipfire.org/sundancer/32/13784_2.png) [@sundancer](https://community.ipfire.org/u/sundancer)\
**Post date:** [24 February 2026 08:51 UTC](https://community.ipfire.org/t/logging-domains-visited/15521/1 "2026-02-24T08:51:37Z")

</div>

Hello everyone,

This might have been asked in similar ways but so far none of the threads worked for me. So please bare with me:

What I’d like to have is a “Top 100 domains visited” for any given time frame. Lets say “for the last 10 days”.

Is there an easy way to create such a “top 100” log? No permanent solution and not down to individual local IPs. Just an overview on what is visited?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![otadr](https://community.ipfire.org/user_avatar/community.ipfire.org/otadr/32/14719_2.png) [@otadr](https://community.ipfire.org/u/otadr)\
**Post date:** [24 February 2026 15:08 UTC](https://community.ipfire.org/t/logging-domains-visited/15521/2 "2026-02-24T15:08:54Z")

</div>

adons SARG [www.ipfire.org - SARG - Squid Analysis Report Generator](https://www.ipfire.org/docs/addons/sarg)

---

<div class="post-metadata">

**Author:** ![sec-con](https://community.ipfire.org/user_avatar/community.ipfire.org/sec-con/32/15621_2.png) [@sec-con](https://community.ipfire.org/u/sec-con)\
**Post date:** [24 February 2026 16:01 UTC](https://community.ipfire.org/t/logging-domains-visited/15521/3 "2026-02-24T16:01:04Z")

</div>

interesting, but do you need to setup a proxy for that?

---

<div class="post-metadata">

**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\
**Post date:** [24 February 2026 16:27 UTC](https://community.ipfire.org/t/logging-domains-visited/15521/4 "2026-02-24T16:27:09Z")

</div>

Yes! To collect informations about domains (URLs / FQDNs) visited, the traffic must be directed to a program that analyses the packets.

SARG only samples web proxy accesses.  
In times of encrypted internet traffic (HTTPS, …) it may be a bit tricky to sample information about URLS visited. Mostly the transaction is [lookup the IP by DNS] → [authenticate and exchange keys] -\>[communicate using TLS], where the proxy isn’t involved to much.

Communications besides HTTP(S) are not logged by the proxy. Logging DNS request may help, but includes queries not used for communications.

---

<div class="post-metadata">

**Author:** ![sundancer](https://community.ipfire.org/user_avatar/community.ipfire.org/sundancer/32/13784_2.png) [@sundancer](https://community.ipfire.org/u/sundancer)\
**Post date:** [26 February 2026 09:05 UTC](https://community.ipfire.org/t/logging-domains-visited/15521/5 "2026-02-26T09:05:26Z")

</div>

I’ve been using SARG now for 24 hours with a transparent proxy and it seems to be exactly what I need atm. Thank you everybody.

---

<div class="post-metadata">

**Author:** ![sec-con](https://community.ipfire.org/user_avatar/community.ipfire.org/sec-con/32/15621_2.png) [@sec-con](https://community.ipfire.org/u/sec-con)\
**Post date:** [4 March 2026 06:45 UTC](https://community.ipfire.org/t/logging-domains-visited/15521/6 "2026-03-04T06:45:49Z")

</div>

Trying to convince myself of the need of a proxy to do this monitoring.

I will look up implications. No intention to create a derived topic here.