[squid-users] Help: How to calculate all bytes when communicate with client for a request

[Alex Rousskov]

On 12/20/2016 09:09 PM, wei wrote:
> Below is two Get and Post commands and you can see there is no
> difference with their total size(%st 3520) in the logs:
> 
> curl --proxy 48.96.17.25:3128  https://showip.net
> curl --proxy 48.96.17.25:3128 -d'test' https://showip.net
> 
> 1482292236.816   1700 48.96.17.25 TCP_TUNNEL/200 3408*112 3520 *0 112
> CONNECT showip.net:443 - HIER_DIRECT/showip.net:23.253.100.206 -
> 1482292258.735   1234 48.96.17.25 TCP_TUNNEL/200 3408*112 3520 *0 112
> CONNECT showip.net:443 - HIER_DIRECT/showip.net:23.253.100.206 -
> 
> logformat in squid.conf is:
> logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st*%>st %st *%<sh %>sh
> %rm %ru %un %Sh/%<A:%<a %mt**
> 
> For Https, %>st is supposed to be "Total bytes received from client" and
> %st is supposed to be "Total bytes received from client and sent to
> client", right? 

Correct.

> But why they have no change while the client send more
> data to squid server? Is this a bug?

If your Squid does not use SslBump features, then most likely this is a
tunneling code bug in Squid.

Alex.