[squid-users] auth, ssl bump and analyzing logs

[Marko Cupać]

Hi,

is there a way to parse squid access.log in a way that only traffic
that was served to clients count? I used to parse access.log with
calamaris, and I was getting useful info from it, but since I introduced
authentication and ssl bumping I suspect I am getting very large
numbers for ERRORs (I guess as a result of auth 407's etc.)

# Incoming TCP-requests by status
status         request      %    Byte       %   sec  kB/sec 
------------- --------- ------ -------- ------ ---- ------- 
HIT               89540   6.20    1703M   4.07    0  182.82 
MISS             698904  48.37   18055M  43.13    2   16.34 
ERROR            656402  45.43   22105M  52.80    1   49.58 
------------- --------- ------ -------- ------ ---- ------- 
Sum             1444846 100.00   41862M 100.00    1   26.83

Thank you in advance,

-- 
Before enlightenment - chop wood, draw water.
After  enlightenment - chop wood, draw water.

Marko Cupać
https://www.mimar.rs/