Re: [squid-users] Only logging DENIED or MISS actions

Cactus&Co wrote:
> On Debian Squeeze
> # squid -v
> Squid Cache: Version 2.7.STABLE8
> configure options: '--prefix=/usr' '--exec_prefix=/usr'
> '--bindir=/usr/sbin' '--sbindir=/usr/sbin' '--libexecdir=/usr/lib/squid'
> '--sysconfdir=/etc/squid' '--localstatedir=/var/spool/squid'
> '--datadir=/usr/share/squid' '--enable-async-io' '--with-pthreads'
> '--enable-storeio=ufs,aufs,coss,diskd,null' '--enable-linux-netfilter'
> '--enable-arp-acl' '--enable-epoll' '--enable-removal-policies=lru,heap'
> '--enable-snmp' '--enable-delay-pools' '--enable-htcp'
> '--enable-cache-digests' '--enable-underscores' '--enable-referer-log'
> '--enable-useragent-log' '--enable-auth=basic,digest,ntlm,negotiate'
> '--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-carp'
> '--enable-follow-x-forwarded-for' '--with-large-files' '--with-maxfd=65536'
> 'i386-debian-linux' 'build_alias=i386-debian-linux'
> 'host_alias=i386-debian-linux' 'target_alias=i386-debian-linux'
> 'CFLAGS=-Wall -g -O2' 'LDFLAGS=' 'CPPFLAGS='
>
> squid.conf tag:
>
> access_log /var/log/squid/access.log squid
>
> Logging ONLY register action with DENIED or MISS
> Like this:
>
> DENIED/504 1739 GET http://www.site.com/ - NONE/- text/html
> MISS/504 1907 GET http://www.site.com/ - DIRECT/200.xxx.xxx.xxx text/html
> MISS/504 2074 GET http://www.site.com/ - DIRECT/190.xxx.xx.xx text/html
>
> Any idea??
> Regards
> Rick
>

That does not look like the "squid" native format. Please how the bits
you erased as well.

a) you configured it to.
    Look for other access_log lines, log_access lines, and "cache deny"
lines.

b) you're using a patched your proxy.
    Is this the Debian package? or a self-built proxy?

c) those are actually the requests happening.

FWIW; SITE systems Inc. have their website hosted at 66.113.131.78 right
now. Your DNS cache may have been poisoned.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.1