Quantcast

Log Setup

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Log Setup

creditu
I have a 3.1 accelerator and have set the logs up to emulate _httpd_log.
 On the standard squid log I can see which backend server the request
was sent to:
 
1481343537.601      1 192.168.1.227 TCP_MISS/200 496 GET
https://192.168.1.102/ - ROUNDROBIN_PARENT/192.168.1.21 text/html

When I turn on httpd emulation I can't seem to come up with the
setting/option that will give me the IP of the backend the request was
sent to.  Is there a way to do this in 3.1?  I can get the
ROUNDROBIN_PARENT part, but not the IP.

192.168.1.227 - - [09/Dec/2016:21:21:48 -0700] "GET
https://192.168.1.102/ HTTP/1.1" 200 498 "-" "Mozilla/5.0 (X11; Linux
i686; rv:45.0) Gecko/20100101 Firefox/45.0" "-" "-" "192.168.1.102" "-"
"-" "1" TCP_MISS:ROUNDROBIN_PARENT
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Log Setup

Amos Jeffries
Administrator
On 31/01/2017 3:46 a.m., creditu wrote:
> I have a 3.1 accelerator and have set the logs up to emulate _httpd_log.

Apache ("httpd") is a web server. Its logging format was not designed
for use by proxies nor to display the type of information routinely
handled by proxies (and CDN in your case).

The rest of your problems follow naturally from that simple fact.


>  On the standard squid log I can see which backend server the request
> was sent to:
>  
> 1481343537.601      1 192.168.1.227 TCP_MISS/200 496 GET
> https://192.168.1.102/ - ROUNDROBIN_PARENT/192.168.1.21 text/html
>
> When I turn on httpd emulation I can't seem to come up with the
> setting/option that will give me the IP of the backend the request was
> sent to.  Is there a way to do this in 3.1?  I can get the
> ROUNDROBIN_PARENT part, but not the IP.

You can try "log_fqdn off", but really you should stop using web-server
format to record proxy information.

PS. Also you should upgrade your proxy, Squid 3.1 is past 5 years old in
an Internet that has seen massive changes in those years.

Amos

_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Loading...