[squid-users] squdi access.log

[leomessi983 at yahoo.com]

..HiWhy do I see multiple different lines in access.log file?Is every line a separate request?I used ssl-bump , peek at_step sslbump1 and then based on my ACL,I bump them or splice them!my squid.conf for log:logformat squid2   %ts %{%Y %b %d %H:%M:%S}tl %>a %<a %<A %ru %>Hs %<Hs %ssl::bump_mode
 For example for google.com I see multiple lines in access.log:1563634658 2019 Jul 20 19:27:38  40.0.0.40 - - 216.58.208.67:443 200 - splice
1563634658 2019 Jul 20 19:27:38  40.0.0.40 - - 216.58.208.67:443 200 - splice
1563634659 2019 Jul 20 19:27:39  40.0.0.40 - - 172.217.18.130:443 200 - splice
1563634659 2019 Jul 20 19:27:39  40.0.0.40 - - 216.58.208.78:443 200 - splice
1563634659 2019 Jul 20 19:27:39  40.0.0.40 - - 172.217.18.130:443 200 - splice
where is https:// google.com in the this log?

If i denied google , access.log shows:1563634748 2019 Jul 20 19:29:08  40.0.0.40 172.217.18.130 googleads.g.doubleclick.net googleads.g.doubleclick.net:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 216.58.208.78 apis.google.com apis.google.com:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 172.217.18.130 adservice.google.com adservice.google.com:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 216.58.208.67 ssl.gstatic.com ssl.gstatic.com:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 216.58.208.67 www.gstatic.com www.gstatic.com:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 172.217.18.132 www.google.com www.google.com:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 172.217.18.132 www.google.com www.google.com:443 200 - splice
1563634748 2019 Jul 20 19:29:08  40.0.0.40 172.217.18.132 172.217.18.132 172.217.18.132:443 200 - bump
1563634749 2019 Jul 20 19:29:09  40.0.0.40 134.0.216.195 detectportal.firefox.com http://detectportal.firefox.com/success.txt 200 200 -
1563634749 2019 Jul 20 19:29:09  40.0.0.40 - - 99.86.163.28:443 200 - splice


Thank you





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190720/218069e5/attachment.html>