Re: [squid-users] Need some help with log files...

Hi Flavio,

Please go through FAQ 6.6 again...
> time elapsed remotehost code/status bytes method URL rfc931
peerstatus/peerhost type

The byte value (5481) is after code/status (TCP_MISS/200)

Rgds,
Wei Keong

----- Original Message -----
From: "Boniforti Flavio" <boniforti.f@co-ver.it>
To: <squid-users@squid-cache.org>
Sent: Saturday, June 15, 2002 3:18 PM
Subject: [squid-users] Need some help with log files...

> Hello All!!!!
>
> I've been noticing something strange happening with my squid proxy. I'm
> using webalizer to generate daily reports on my activities, but as I
> look at the "Host table" I see that my IP has done some 140MBs of
> traffic, which is absolutely impossible, I don't surf/download that much
> through our proxy. This behaviour is going on since one week, everyday
> surprising me with an incredible amount of traffic I've not done.
>
> Now I went over trying to analyze my log files and there's how I got
> into trouble: I was searching for the "byte" value, which should
> indicate how many bytes were transferred by that particular object, but
> I can't find any!!!
>
> Here I post a line, could somebody point me at the right data???
>
> 1024049516.804 2696 192.168.0.124 TCP_MISS/200 5481 GET
> http://www.nodeworks.com/navbar.htm - DIRECT/206.135.235.178 text/html
>
> As I read from the FAQ, the "byte" value should be after the "MIME-type"
> value, right? I first thought it was the second value, but this one's
> addressed as "elapsed".
>
> Thank you in advance for any help, I'll also try to check what may be
> happening with my Webalizer!
>
> Happy week-end!
>
>
> Boniforti Flavio
> Informa Srl
> Via 42 Martiri, 165
> 28924 Verbania (VB)
> Tel +39 0323 586216
> Fax +39 0323 586672
> http://www.co-ver.it/informa
>
>
>
Received on Sat Jun 15 2002 - 03:39:24 MDT