[squid-users] dumb question: how to get http server IP into logs?

[Jason Haar]

Thanks for that guys. Dumb mistake - I had "%<A" in there instead of "%<a"
:-/

(although it's so 'dumb' that I'm now wondering "did I originally chose
that for a reason?". I've just lowercased it - I guess I'll see what breaks
;-)

On Mon, Jul 31, 2017 at 11:49 PM, Eliezer Croitoru <eliezer at ngtech.co.il>
wrote:

> I looked at:
> http://www.squid-cache.org/Doc/config/logformat/
>
> and the default squid logformat:
> logformat squid      %ts.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru %[un
> %Sh/%<a %mt
>
> Seems to contain the desired pattern.
> Am I missing something?
>
> Eliezer
>
> ----
> Eliezer Croitoru
> Linux System Administrator
> Mobile: +972-5-28704261
> Email: eliezer at ngtech.co.il
>
>
> -----Original Message-----
> From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On
> Behalf Of Amos Jeffries
> Sent: Monday, July 31, 2017 13:22
> To: squid-users at lists.squid-cache.org
> Subject: Re: [squid-users] dumb question: how to get http server IP into
> logs?
>
> On 30/07/17 22:02, Jason Haar wrote:
> > Hi there
> >
> > We're running squid-3.5.23 and use ICAP (if that makes a difference)
> >
> > We also use logformat to include certain details in the logs - but I
> > can't see an option for including the actual IP address that squid uses
> > when attempting to fulfil an URL request. eg squid gets told to go to
> > twitter.com <http://twitter.com>, resolves that to 4 IPs, tries 1st -
> > fails, tries 2nd - succeeds. I'd like to record that IP in the logs
> > along with everything else. I can see variables for recording the client
> > and squid-server IP - but not the web server?
> >
> > Is that possible? I'm sure older (3.2) squid used to do that by default?
> > (DIRECT/1.2.3.4? <http://1.2.3.4?>). All our logs are now "HIER_DIRECT"
> >
>
> The code you are looking for is %<a .
> <http://www.squid-cache.org/Doc/config/logformat/>
> "Server IP address of the last server or peer connection"
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>



-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170809/0f642f6e/attachment.html>