<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Read squid.cache.documented carefully again:<br>
<br>
# LOGFILE OPTIONS<br>
#
-----------------------------------------------------------------------------<br>
<br>
# TAG: logformat<br>
# Usage:<br>
#<br>
# logformat <name> <format specification><br>
#<br>
# Defines an access log format.<br>
#<br>
# The <format specification> is a string with embedded %
format codes<br>
#<br>
# % format codes all follow the same basic structure where all
but<br>
# the formatcode is optional. Output strings are automatically
escaped<br>
# as required according to their context and the output format<br>
# modifiers are usually not needed, but can be specified if an
explicit<br>
# output format is desired.<br>
#<br>
# % ["|[|'|#] [-] [[0]width] [{argument}] formatcode<br>
#<br>
# " output in quoted string format<br>
# [ output in squid text log format as used by
log_mime_hdrs<br>
# # output in URL quoted format<br>
# ' output as-is<br>
#<br>
# - left aligned<br>
#<br>
# width minimum and/or maximum field width:<br>
# [width_min][.width_max]<br>
# When minimum starts with 0, the field is zero-padded.<br>
# String values exceeding maximum width are truncated.<br>
#<br>
# {arg} argument such as header name etc<br>
#<br>
# Format codes:<br>
#<br>
# % a literal % character<br>
# sn Unique sequence number per log line entry<br>
# err_code The ID of an error response served by Squid or<br>
# a similar internal error identifier.<br>
# err_detail Additional err_code-dependent error
information.<br>
# note The annotation specified by the argument. Also<br>
# logs the adaptation meta headers set by the<br>
# adaptation_meta configuration parameter.<br>
# If no argument given all annotations logged.<br>
# The argument may include a separator to use with<br>
# annotation values:<br>
# name[:separator]<br>
# By default, multiple note values are separated with ","<br>
# and multiple notes are separated with "\r\n".<br>
# When logging named notes with %{name}note, the<br>
# explicitly configured separator is used between note<br>
# values. When logging all notes with %note, the<br>
# explicitly configured separator is used between<br>
# individual notes. There is currently no way to<br>
# specify both value and notes separators when logging<br>
# all notes with %note.<br>
#<br>
# Connection related format codes:<br>
#<br>
# >a Client source IP address<br>
# >A Client FQDN<br>
# >p Client source port<br>
# >eui Client source EUI (MAC address, EUI-48 or EUI-64
identifier)<br>
# >la Local IP address the client connected to<br>
# >lp Local port number the client connected to<br>
# >qos Client connection TOS/DSCP value set by Squid<br>
# >nfmark Client connection netfilter mark set by Squid<br>
#<br>
# la Local listening IP address the client connection was
connected to.<br>
# lp Local listening port number the client connection was
connected to.<br>
#<br>
# <a Server IP address of the last server or peer
connection<br>
# <A Server FQDN or peer name<br>
# <p Server port number of the last server or peer
connection<br>
# <la Local IP address of the last server or peer
connection<br>
# <lp Local port number of the last server or peer
connection<br>
# <qos Server connection TOS/DSCP value set by Squid<br>
# <nfmark Server connection netfilter mark set by Squid<br>
#<br>
# Time related format codes:<br>
#<br>
# ts Seconds since epoch<br>
# tu subsecond time (milliseconds)<br>
# tl Local time. Optional strftime format argument<br>
# default %d/%b/%Y:%H:%M:%S %z<br>
# tg GMT time. Optional strftime format argument<br>
# default %d/%b/%Y:%H:%M:%S %z<br>
# tr Response time (milliseconds)<br>
# dt Total time spent making DNS lookups (milliseconds)<br>
# tS Approximate master transaction start time in<br>
# <full seconds since epoch>.<fractional
seconds> format.<br>
# Currently, Squid considers the master transaction<br>
# started when a complete HTTP request header initiating<br>
# the transaction is received from the client. This is<br>
# the same value that Squid uses to calculate transaction<br>
# response time when logging %tr to access.log.
Currently,<br>
# Squid uses millisecond resolution for %tS values,<br>
# similar to the default access.log "current time" field<br>
# (%ts.%03tu).<br>
#<br>
# Access Control related format codes:<br>
#<br>
# et Tag returned by external acl<br>
# ea Log string returned by external acl<br>
# un User name (any available)<br>
# ul User name from authentication<br>
# ue User name from external acl helper<br>
# ui User name from ident<br>
# un A user name. Expands to the first available name<br>
# from the following list of information sources:<br>
# - authenticated user name, like %ul<br>
# - user name supplied by an external ACL, like %ue<br>
# - SSL client name, like %us<br>
# - ident user name, like %ui<br>
# credentials Client credentials. The exact meaning depends
on<br>
# the authentication scheme: For Basic authentication,<br>
# it is the password; for Digest, the realm sent by the<br>
# client; for NTLM and Negotiate, the client challenge<br>
# or client credentials prefixed with "YR " or "KK ".<br>
#<br>
# HTTP related format codes:<br>
#<br>
# REQUEST<br>
#<br>
# [http::]rm Request method (GET/POST etc)<br>
# [http::]>rm Request method from client<br>
# [http::]<rm Request method sent to server or peer<br>
# [http::]ru Request URL from client (historic, filtered
for logging)<br>
# [http::]>ru Request URL from client<br>
# [http::]<ru Request URL sent to server or peer<br>
# [http::]>rs Request URL scheme from client<br>
# [http::]<rs Request URL scheme sent to server or peer<br>
# [http::]>rd Request URL domain from client<br>
# [http::]<rd Request URL domain sent to server or peer<br>
# [http::]>rP Request URL port from client<br>
# [http::]<rP Request URL port sent to server or peer<br>
# [http::]rp Request URL path excluding hostname<br>
# [http::]>rp Request URL path excluding hostname from
client<br>
# [http::]<rp Request URL path excluding hostname sent
to server or peer<br>
# [http::]rv Request protocol version<br>
# [http::]>rv Request protocol version from client<br>
# [http::]<rv Request protocol version sent to server
or peer<br>
#<br>
# [http::]>h Original received request header.<br>
# Usually differs from the request header sent by<br>
# Squid, although most fields are often preserved.<br>
# Accepts optional header field name/value filter<br>
# argument using name[:[separator]element] format.<br>
# [http::]>ha Received request header after adaptation
and<br>
# redirection (pre-cache REQMOD vectoring point).<br>
# Usually differs from the request header sent by<br>
# Squid, although most fields are often preserved.<br>
# Optional header name argument as for >h<br>
#<br>
#<br>
# RESPONSE<br>
#<br>
# [http::]<Hs HTTP status code received from the next
hop<br>
# [http::]>Hs HTTP status code sent to the client<br>
#<br>
# [http::]<h Reply header. Optional header name
argument<br>
# as for >h<br>
#<br>
# [http::]mt MIME content type<br>
#<br>
#<br>
# SIZE COUNTERS<br>
#<br>
# [http::]st Total size of request + reply traffic with
client<br>
# [http::]>st Total size of request received from
client.<br>
# Excluding chunked encoding bytes.<br>
# [http::]<st Total size of reply sent to client (after
adaptation)<br>
#<br>
# [http::]>sh Size of request headers received from
client<br>
# [http::]<sh Size of reply headers sent to client
(after adaptation)<br>
#<br>
# [http::]<sH Reply high offset sent<br>
# [http::]<sS Upstream object size<br>
#<br>
# [http::]<bs Number of HTTP-equivalent message body
bytes<br>
# received from the next hop, excluding chunked<br>
# transfer encoding and control messages.<br>
# Generated FTP/Gopher listings are treated as<br>
# received bodies.<br>
#<br>
#<br>
# TIMING<br>
#<br>
# [http::]<pt Peer response time in milliseconds. The
timer starts<br>
# when the last request byte is sent to the next hop<br>
# and stops when the last response byte is received.<br>
# [http::]<tt Total time in milliseconds. The timer<br>
# starts with the first connect request (or write
I/O)<br>
# sent to the first selected peer. The timer stops<br>
# with the last I/O with the last peer.<br>
#<br>
# Squid handling related format codes:<br>
#<br>
# Ss Squid request status (TCP_MISS etc)<br>
# Sh Squid hierarchy status (DEFAULT_PARENT etc)<br>
#<br>
# SSL-related format codes:<br>
#<br>
# ssl::bump_mode SslBump decision for the transaction:<br>
#<br>
# For CONNECT requests that initiated bumping of<br>
# a connection and for any request received on<br>
# an already bumped connection, Squid logs the<br>
# corresponding SslBump mode ("server-first" or<br>
# "client-first"). See the ssl_bump option for<br>
# more information about these modes.<br>
#<br>
# A "none" token is logged for requests that<br>
# triggered "ssl_bump" ACL evaluation matching<br>
# either a "none" rule or no rules at all.<br>
#<br>
# In all other cases, a single dash ("-") is<br>
# logged.<br>
#<br>
# ssl::>sni SSL client SNI sent to Squid. Available
only<br>
# after the peek, stare, or splice SSL bumping<br>
# actions.<br>
#<br>
# If ICAP is enabled, the following code becomes available (as<br>
# well as ICAP log codes documented with the icap_log option):<br>
#<br>
# icap::tt Total ICAP processing time for the HTTP<br>
# transaction. The timer ticks when ICAP<br>
# ACLs are checked and when ICAP<br>
# transaction is in progress.<br>
#<br>
# If adaptation is enabled the following three codes become
available:<br>
#<br>
# adapt::<last_h The header of the last ICAP response
or<br>
# meta-information from the last eCAP<br>
# transaction related to the HTTP transaction.<br>
# Like <h, accepts an optional header name<br>
# argument.<br>
#<br>
# adapt::sum_trs Summed adaptation transaction response<br>
# times recorded as a comma-separated list in<br>
# the order of transaction start time. Each time<br>
# value is recorded as an integer number,<br>
# representing response time of one or more<br>
# adaptation (ICAP or eCAP) transaction in<br>
# milliseconds. When a failed transaction is<br>
# being retried or repeated, its time is not<br>
# logged individually but added to the<br>
# replacement (next) transaction. See also:<br>
# adapt::all_trs.<br>
#<br>
# adapt::all_trs All adaptation transaction response times.<br>
# Same as adaptation_strs but response times of<br>
# individual transactions are never added<br>
# together. Instead, all transaction response<br>
# times are recorded individually.<br>
#<br>
# You can prefix adapt::*_trs format codes with adaptation<br>
# service name in curly braces to record response time(s)
specific<br>
# to that service. For example: %{my_service}adapt::sum_trs<br>
#<br>
# If SSL is enabled, the following formating codes become
available:<br>
#<br>
# %ssl::>cert_subject The Subject field of the received
client<br>
# SSL certificate or a dash ('-') if Squid has<br>
# received an invalid/malformed certificate or<br>
# no certificate at all. Consider encoding the<br>
# logged value because Subject often has spaces.<br>
#<br>
# %ssl::>cert_issuer The Issuer field of the received
client<br>
# SSL certificate or a dash ('-') if Squid has<br>
# received an invalid/malformed certificate or<br>
# no certificate at all. Consider encoding the<br>
# logged value because Issuer often has spaces.<br>
#<br>
# The default formats available (which do not need re-defining)
are:<br>
#<br>
#logformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs %<st
%rm %ru %[un %Sh/%<a %mt<br>
#logformat common %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv"
%>Hs %<st %Ss:%Sh<br>
#logformat combined %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv"
%>Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh<br>
#logformat referrer %ts.%03tu %>a %{Referer}>h %ru<br>
#logformat useragent %>a [%tl] "%{User-Agent}>h"<br>
#<br>
# NOTE: When the log_mime_hdrs directive is set to ON.<br>
# The squid, common and combined formats have a safely
encoded copy<br>
# of the mime headers appended to each line within a pair of
brackets.<br>
#<br>
# NOTE: The common and combined formats are not quite true to the
Apache definition.<br>
# The logs from Squid contain an extra status and hierarchy
code appended.<br>
#<br>
#Default:<br>
# The format definitions squid, common, combined, referrer,
useragent are built in.<br>
<br>
# TAG: access_log<br>
# Configures whether and how Squid logs HTTP and ICP
transactions.<br>
# If access logging is enabled, a single line is logged for every<br>
# matching HTTP or ICP request. The recommended directive formats
are:<br>
#<br>
# access_log <module>:<place> [option ...] [acl acl
...]<br>
# access_log none [acl acl ...]<br>
#<br>
# The following directive format is accepted but may be
deprecated:<br>
# access_log <module>:<place> [<logformat name>
[acl acl ...]]<br>
#<br>
# In most cases, the first ACL name must not contain the '='
character<br>
# and should not be equal to an existing logformat name. You can
always<br>
# start with an 'all' ACL to work around those restrictions.<br>
# <br>
# Will log to the specified module:place using the specified
format (which<br>
# must be defined in a logformat directive) those entries which
match<br>
# ALL the acl's specified (which must be defined in acl clauses).<br>
# If no acl is specified, all requests will be logged to this
destination.<br>
# <br>
# ===== Available options for the recommended directive format
=====<br>
#<br>
# logformat=name Names log line format (either built-in or<br>
# defined by a logformat directive). Defaults<br>
# to 'squid'.<br>
#<br>
# buffer-size=64KB Defines approximate buffering limit for log<br>
# records (see buffered_logs). Squid should not<br>
# keep more than the specified size and, hence,<br>
# should flush records before the buffer becomes<br>
# full to avoid overflows under normal<br>
# conditions (the exact flushing algorithm is<br>
# module-dependent though). The on-error option<br>
# controls overflow handling.<br>
#<br>
# on-error=die|drop Defines action on unrecoverable errors.
The<br>
# 'drop' action ignores (i.e., does not log)<br>
# affected log records. The default 'die' action<br>
# kills the affected worker. The drop action<br>
# support has not been tested for modules other<br>
# than tcp.<br>
#<br>
# ===== Modules Currently available =====<br>
# <br>
# none Do not log any requests matching these ACL.<br>
# Do not specify Place or logformat name.<br>
# <br>
# stdio Write each log line to disk immediately at the
completion of<br>
# each request.<br>
# Place: the filename and path to be written.<br>
# <br>
# daemon Very similar to stdio. But instead of writing to disk
the log<br>
# line is passed to a daemon helper for asychronous handling
instead.<br>
# Place: varies depending on the daemon.<br>
# <br>
# log_file_daemon Place: the file name and path to be
written.<br>
# <br>
# syslog To log each request via syslog facility.<br>
# Place: The syslog facility and priority level for these
entries.<br>
# Place Format: facility.priority<br>
#<br>
# where facility could be any of:<br>
# authpriv, daemon, local0 ... local7 or user.<br>
#<br>
# And priority could be any of:<br>
# err, warning, notice, info, debug.<br>
# <br>
# udp To send each log line as text data to a UDP receiver.<br>
# Place: The destination host name or IP and port.<br>
# Place Format: //host:port<br>
#<br>
# tcp To send each log line as text data to a TCP receiver.<br>
# Lines may be accumulated before sending (see
buffered_logs).<br>
# Place: The destination host name or IP and port.<br>
# Place Format: //host:port<br>
#<br>
# Default:<br>
# access_log daemon:/usr/local/squid/var/logs/access.log
squid<br>
#Default:<br>
# access_log daemon:/usr/local/squid/var/logs/access.log squid<br>
<br>
You can define any custom access.log, for example, and write this
custom log at the same time.<br>
<br>
27.04.16 1:20, Aashima Madaan пишет:<br>
<span style="white-space: pre;">> Hey,<br>
><br>
> I have kept squid between a proxy and a server. Requests and
response pass from proxy to squid to server and back.<br>
><br>
> Does squid has any other logs except cache.log and
access.log? are there any ways to improve squid logging or enable
any debug logs?<br>
><br>
> Thanks<br>
> Aashima<br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXH8JPAAoJENNXIZxhPexGB88H/2wnTr0o3K/A9hkHcMHzE/fj
<br>
CzOOL5B0YYijwk4m+8UBqmBkt6WQVc5AeWASmzHsxjh6/wqRK8up8dOmgS7uSbI+
<br>
wM+5c8AhvcBQlMkHQB58bMbcBKjxZVFeo/YYD8iglZ/o95Fflv+6d+Tv2Wh0s7Bb
<br>
iKN2riLryC244OciEiNTjU9TpaofsmOAGvTddoJerZse43Az9av7B4xLWfhs6NRs
<br>
LY6zk1Rj/QXF/U1CH9Lnxs84LfyuPDXuC1q+/jfYgbr7f1UZPrOV7wuQo7DksmHi
<br>
V3T53mfg2qRqShjo/Ezxc+YMkfgmouGR4Nz2UQekOfphFqrHNCuB6Jmyh3NkaiA=
<br>
=rx3x
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>