Mikrotik how to organize logging of visited sites (https)?

Question

Mikrotik

There was a task to save logs of visited sites by ip. I found information on setting up web-proxy on mikrotik. But it describes how to configure via http. Are there options for logging visited sites via https ?

Answer 1

Log calls to port 443?
You can still conjure with Layer7.

Answer 2

If "by ip" means - it is enough to collect only ip addresses, then netflow will be enough for you. On the Mikrotik, you adjust the return, on the collector, collection and analysis. If you need to do without an external server, you will have to conjure with scripts.
forummikrotik.ru/viewtopic.php?f=16&t=3474 There was another topic about a ready-made solution, but I could not find it on the go.

Answer 3

This is Https, no one will give you encryption keys, options to mirror the port and direct traffic to DPI, or write to the connection log on port 443 to specific ip, but it’s not a fact that there can be a lot of sites behind the same ip.

Answer 4

I have almost the same question.
The task is the following, how to organize logging of all visited sites with a record by DNS name? in fact, I need a domain name record up to level 2 (including the second).
On the switch is! the ability to mirror the port!
If there was a similar topic, please share the link.