<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>.</div><div>.</div><div dir="ltr" data-setdir="false">Hi</div><div dir="ltr" data-setdir="false">Why do I see multiple different lines in access.log file?</div><div dir="ltr" data-setdir="false">Is every line a separate request?</div><div dir="ltr" data-setdir="false">I used ssl-bump , peek at_step sslbump1 and then based on my ACL,I bump them or splice them!</div><div dir="ltr" data-setdir="false">my squid.conf for log:</div><div dir="ltr" data-setdir="false"><span>logformat squid2 %ts %{%Y %b %d %H:%M:%S}tl %>a %<a %<A %ru %>Hs %<Hs %ssl::bump_mode</span></div><div dir="ltr" data-setdir="false"><span></span><br> </div><div dir="ltr" data-setdir="false">For example for google.com I see multiple lines in access.log:</div><div dir="ltr" data-setdir="false"><div>1563634658 2019 Jul 20 19:27:38 40.0.0.40 - - 216.58.208.67:443 200 - splice<br>1563634658 2019 Jul 20 19:27:38 40.0.0.40 - - 216.58.208.67:443 200 - splice<br>1563634659 2019 Jul 20 19:27:39 40.0.0.40 - - 172.217.18.130:443 200 - splice<br>1563634659 2019 Jul 20 19:27:39 40.0.0.40 - - 216.58.208.78:443 200 - splice<br>1563634659 2019 Jul 20 19:27:39 40.0.0.40 - - 172.217.18.130:443 200 - splice</div><div dir="ltr" data-setdir="false"><span><br></span></div><div dir="ltr" data-setdir="false"><span>where is https:// google.com in the this log?</span></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">If i denied google , access.log shows:</div><div dir="ltr" data-setdir="false"><div>1563634748 2019 Jul 20 19:29:08 40.0.0.40 172.217.18.130 googleads.g.doubleclick.net googleads.g.doubleclick.net:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 216.58.208.78 apis.google.com apis.google.com:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 172.217.18.130 adservice.google.com adservice.google.com:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 216.58.208.67 ssl.gstatic.com ssl.gstatic.com:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 216.58.208.67 www.gstatic.com www.gstatic.com:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 172.217.18.132 www.google.com www.google.com:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 172.217.18.132 www.google.com www.google.com:443 200 - splice<br>1563634748 2019 Jul 20 19:29:08 40.0.0.40 172.217.18.132 172.217.18.132 172.217.18.132:443 200 - bump<br>1563634749 2019 Jul 20 19:29:09 40.0.0.40 134.0.216.195 detectportal.firefox.com http://detectportal.firefox.com/success.txt 200 200 -<br>1563634749 2019 Jul 20 19:29:09 40.0.0.40 - - 99.86.163.28:443 200 - splice<br><br></div><div><br></div><div dir="ltr" data-setdir="false">Thank you</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false"><br></div><div><br></div><div><br></div><div><br></div></div></div><div dir="ltr" data-setdir="false"><br></div></div></body></html>