[squid-users] Clarification of what I should be seeing in the log files.

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
This entries is a sign of normal https tunneling phase. You simple don't
know how HTTPS works. :)

24.02.16 21:32, Bruce Markey пишет:
> I can't seem to find a straight answer for this. 
>
> I'm running squid 3.4.8. Compiled from source.
>
> I'ts talking via wccp to our firewall.   We're using it only for
informational purposes, IE we're not blocking anything, just trying to
get some visibility into what our pipe is being used for.
>
> http works as expected no issues there.
>
> What I'm trying to find out is should or shouldn't I get some sort of
log entry for https, the initial get before the tls is setup? 
>
> Something like :  1341110030.974 973 172.17.3.37 TCP_MISS/200 2361
CONNECT example.com:443 <http://example.com:443> vineeth.v DIRECT/X.X.X.X -
>
> I am not trying to do any decryption.
>
> Currently I have the firewall not redirecting service 70 ( https ) to
squid because when it's on, you can't get to those sites.
>
> So I think at this point I'm either expecting something to happen that
can't, the log being written , or I'm doing something wrong, I'm just
not sure which it is.
>
> Squid.conf:
>
> #Access Lists
> #acl manager proto cache_object
> #acl localhost src 127.0.0.1/32 <http://127.0.0.1/32>
> acl internal src 192.168.200.0/21 <http://192.168.200.0/21>
> acl wireless src 192.168.100.0/23 <http://192.168.100.0/23>
>
> #Ports allowed through Squid
> acl Safe_ports port 80
> acl Safe_ports port 443
> acl SSL_ports port 443
> acl SSL method CONNECT
> acl CONNECT method CONNECT
>
> #allow/deny
> #http_access allow localhost
> http_access allow internal
> http_access allow wireless
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access deny all
>
> #caching directory
> #cache_dir ufs /home/user/squidcache/ 2048 16 128
> #cache_mem 1024 MB
>
> #nameservers
> dns_nameservers 192.168.201.1 8.8.8.8
> #WCCPv2 items
> http_port 3128 intercept
> wccp_version 2
> wccp2_router 192.168.200.73
> wccp2_forwarding_method gre
> wccp2_return_method gre
> wccp2_service standard 0 password=xxxxxxxx
> wccp2_service dynamic 70 password=xxxxxxxx
> wccp2_service_info 70 protocol=tcp flags=dst_ip_hash priority=240
ports=443
>
> Thank you
> Bruce
>
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJWzgBfAAoJENNXIZxhPexGuf4H/38W2tBzjgxZlF1eeskmVSnj
V1sNaiqr0fsmUiaIOF6umsOKGbch7Vh2NrGBcrG1Mqu1Bgc0OFJVqTarTxwF6DaD
y4wPKz6e1JqU/HmQbpnt4u5qc3NqC/x0DWujkNh6K8ndIkgcfig+844gp7AsnkBX
+Kiu8jB55aQfAzXIxCFxl2M3QYG7MWzhgXeUpqnseZeaOdySwhrqUb/t2n2HI4b+
ckhFGoVc0+/GcqTZ/XI9+kPZyhvczUnGLd4Bgcxd4Jz32O1rqsf3yBtzSUVp7O1W
B1K9hPXSRGTlf9GmXRC5Lc7IRDkiVLA7m0quaojJSYRbEWrQ9+GELm/QXWGxZ/o=
=aMc9
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160225/fc3a18df/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160225/fc3a18df/attachment.key>