Re: [squid-users] google drive up-/download size in squidlog

2016-06-02 Thread Amos Jeffries 
On 2/06/2016 9:01 p.m., Paul Buechler wrote:
> Hi,
> 
> @Yuri Voinov:
> 
> I've only tested it with the webclient.
> 
> @Amos Jeffries:
> 
> I've tested it with %st and the downloadsize is fine for me now, thanks.
> 
> Are there any plans to implement a format code to see the uploadsize?
> It would be nice to have this feature.

That would be the third 'st' tag, which logs *only* the outgoing
direction of traffic.

You really should look through the documentation which lists clearly
what tags are available:
 

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Amos Jeffries 
On 3/06/2016 1:35 a.m., William Ivanski wrote:
> Thank you for your quick response.
> 
> First of all forgive me for the lack of information in the first
> email. I've tried to disable QUIC a few minutes ago and the problem
> persists. Follow the information requested:
> 
> -> Compilation:
> 
> I've installed squid using the following commands:
> 
> cd /usr/src
> 
> apt-get install squid3
> 
> wget 
> http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15-20160330-r14015.tar.gz
> 
> tar xvzf squid-3.5.15-20160330-r14015.tar.gz
> 
> cd squid-3.5.15-20160330-r14015
> 

NP: when building your own always build the latest. Today that would be
one of the 3.5.19 snapshots.


> apt-get build-dep squid3 && apt-get install build-essential libssl-dev
> 
> ./configure --enable-icap-client --enable-ssl --enable-ssl-crtd
> --prefix=/usr --includedir=/usr/include --mandir=/usr/share/man
> --infodir=/usr/share/info --sysconfdir=/etc --localstatedir=/var
> --libexecdir=/lib/squid3 --srcdir=. --datadir=/usr/share/squid3
> --sysconfdir=/etc/squid3 --mandir=/usr/share/man
> --with-default-user=squid --with- cppunit-config-basedir=/usr
> --with-logdir=/var/log/squid3 --with-pidfile=/var/run/squid3.pid
> --with-openssl --disable-optimizations --disable-arch-native
> 
> service squid3 stop
> 
> make all && make install
> 
> useradd squid && chown -R squid:squid /var/log/squid3

Don't. The squid3 package install created the necessary user and
permissions for all required things.

You just need to build with the same default-user settings as Debian.
IIRC that is --with-default-user=proxy

> 
> mv /usr/sbin/squid3 /usr/sbin/squid3.old && mv/usr/sbin/squid
> /usr/sbin/squid3
> 
> /lib/squid3/ssl_crtd -c -s /var/lib/ssl_db -M 4 MB
> 
> chown -R squid:squid /var/lib/ssl_db
> 
> service squid3 restart && service squid3 stop && chmod 777
> /var/spool/squid3 && squid3 -z && service squid3 restart

Same here.

> 
> OBS: We're not using ssl_crtd/ssl_db anymore. Our previous squid conf
> was using intercept, but the actual one isn't configured as
> transparent proxy.

If that is so then any problems Chrome or other agents might be having
are not related to Squid.

They are just creating opaque tunnels through the proxy and doing TLS
stuff end-to-end. There is no reason for the proxy to have TLS/SSL
capabilities at all in that kind of setup.


The config you posted confirms. The OpenSSL abilities you custom
compiled to add to the proxy are not being used in any way.

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread William Ivanski 
Guys,

Antony made me realize I really have a messed up Squid installation. That's
why I tried many different approaches (ssl_crtd/ssl_db, intercept), but the
actual installation isn't configured as transparent proxy.

So I agree I need to reinstall and reconfigure everything. As soon as I
manage to do it, I'll tell you guys if this solves the problem.

Thank you for now.


William Ivanski

2016-06-02 11:45 GMT-03:00 Antony Stone :

> On Thursday 02 June 2016 at 15:35:10, William Ivanski wrote:
>
> > Thank you for your quick response.
> >
> > First of all forgive me for the lack of information in the first
> > email. I've tried to disable QUIC a few minutes ago and the problem
> > persists. Follow the information requested:
> >
> > -> Compilation:
> >
> > I've installed squid using the following commands:
> >
> > cd /usr/src
> >
> > apt-get install squid3
>
> So, that will install a working copy of Squid, and then...
>
> > wget
> >
> http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15-20160330-r14015.ta
> > r.gz
> >
> > tar xvzf squid-3.5.15-20160330-r14015.tar.gz
> >
> > cd squid-3.5.15-20160330-r14015
>
> ...you download the latest source version and try to build it yourself...
>
> > apt-get build-dep squid3 && apt-get install build-essential
> libssl-dev
>
> ...unfortunately using the Debian commands to build from a source package,
> which you did not download (the Debian source package is not the same as
> the
> Squid tarball).
>
> You then proceed to do the standard ./configure && make && make install for
> installation from a tarball.
>
> I wouldn't like to guess what sort of state any installed Squid is in after
> doing this bizarre combination.
>
>
> I recommend installing the Debian binary package, *or* install the Debian
> source package and build from that, *or* download the source tarball and
> build
> that.  Do not combine these.
>
>
> Regards,
>
>
> Antony.
>
> --
> I lay awake all night wondering where the sun went, and then it dawned on
> me.
>
>Please reply to the
> list;
>  please *don't* CC
> me.
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] pinger crash - Bad opcode: 112

2016-06-02 Thread Tomas Mozes 
On Wed, Jun 1, 2016 at 1:53 PM, Amos Jeffries  wrote:

> On 31/05/2016 9:56 p.m., Tomas Mozes wrote:
> > On Thu, May 26, 2016 at 8:04 AM, Amos Jeffries wrote:
> >
> >> On 24/05/2016 7:52 p.m., Tomas Mozes wrote:
> >>> Hello,
> >>> on two different squid servers I've observed a crash of pinger. First
> it
> >>> appeared on version 3.5.15 and later on version 3.5.17.
> >>>
> >>> Cache.log contains these lines:
> >>>
> >>> (pinger): Address.cc:671: void Ip::Address::getAddrInfo(addrinfo*&,
> int)
> >>> const: Assertion `false' failed.
> >>> 2016/05/14 21:55:25 kid1| Bad opcode: 112 from
> >>> [6661:6c73:6522:2061:7420:6c69:6e65:2036]
> >>> 2016/05/14 21:59:13 kid1| recv: (111) Connection refused
> >>> 2016/05/14 21:59:13 kid1| Closing Pinger socket on FD 17
> >>>
> >>> On both servers, that IPv6 address was the same -
> >>> 6661:6c73:6522:2061:7420:6c69:6e65:2036
> >>>
> >>
> >> That is the hexadecimal representation of the error:
> >>  false" at line 6
> >>
> >> Which means that your kernel is producing garbage when asked to resolve
> >> an IPv6 address or respond to an ICMPv6 packet.
> >>
> >
> > Cannot we prevent Squid from crashing in these cases?
> >
>
> Squid is not crashing. The pinger is. Squid continues with degraded
> service latency.
>

Yes, sorry, I wasn't specific. I meant like some part of Squid, not the
Squid caching process itself.


> What kind of continued operations would you expect a program to do when
> it discovers at least some portion of its RAM has been filled with
> garbage by the system kernel?
>


In the worst case - wouldn't it be possible for the master process to
restart it?



>
> Now cross your fingers and pray that no other programs on your whole
> system (network, if you did the same "disable" on other machines) are
> behaving badly in secret when given the garbage by the kernel like
> Squid's pinger was.
>

You know, the strange thing is I only found those strings on google
attached with Squid. No other place. If it's a general issue in the Linux
kernel, then it's been there for years, unnoticed. And as I mentioned
before, it happened on two machines, separate from each other, in
completely different data-centers with the same error message.

What would you suggest?



>
> Amos
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] DNS lookup fails initially for FQDN in squid

2016-06-02 Thread Aashima Madaan 
Hey,

The patch mentioned is applicable to 4.0.10 beta release . For older versions I 
was not able to merge the patch.
So even for beta release it throws segmentation fault. Let me know if am using 
wrong version of code

Backtrace from gdb tool if it can be of any help

Program received signal SIGSEGV, Segmentation fault.
hash_lookup (hid=0x0, k=0xcd4200) at hash.cc:152
152 b = hid->hash(k, hid->size);
Missing separate debuginfos, use: debuginfo-install 
glibc-2.17-106.el7_2.6.x86_64 libattr-2.4.46-12.el7.x86_64 
libcap-2.22-8.el7.x86_64 libgcc-4.8.5-4.el7.x86_64 libstdc++-4.8.5-4.el7.x86_64 
libtool-ltdl-2.4.2-21.el7_2.x86_64 nss-softokn-freebl-3.16.2.3-13.el7_1.x86_64

(gdb) backtrace
#0  hash_lookup (hid=0x0, k=0xcd4200) at hash.cc:152
#1  0x0056059f in idnsCachedLookup (key=key@entry=0xcd4200 
"atld-mcafee01.airwatch.dev", callback=callback@entry=0x5d96a0 
, 
data=data@entry=0xcd4608) at dns_internal.cc:1675
#2  0x005667ee in idnsALookup (name=0xcd4200 
"atld-mcafee01.airwatch.dev", callback=callback@entry=0x5d96a0 
, 
data=data@entry=0xcd4608)
at dns_internal.cc:1742
#3  0x005d9033 in ipcache_nbgethostbyname (name=name@entry=0xcd3db0 
"atld-mcafee01.airwatch.dev", handler=handler@entry=0x0, 
handlerData=handlerData@entry=0x0) at ipcache.cc:561
#4  0x005d95cc in ipcache_gethostbyname (name=0xcd3db0 
"atld-mcafee01.airwatch.dev", flags=flags@entry=1) at ipcache.cc:653
#5  0x007fae8c in Adaptation::ServiceConfig::grokUri 
(this=this@entry=0xcd3ad0, value=value@entry=0xcd3cf0 
"icap://atld-mcafee01.airwatch.dev:1344/") at ServiceConfig.cc:239
#6  0x007fc41f in Adaptation::ServiceConfig::parse (this=0xcd3ad0) at 
ServiceConfig.cc:122
#7  0x007f2773 in Adaptation::Config::parseService (this=0xcb57a0 
) at Config.cc:136
#8  0x0050737b in parse_icap_service_type (cfg=) at 
cache_cf.cc:4235
#9  parse_line (buff=) at cf_parser.cci:3185
#10 0x00510e89 in parseOneConfigFile 
(file_name=file_name@entry=0xcc9860 "/etc/squid/squid.conf", 
depth=depth@entry=0) at cache_cf.cc:544
#11 0x0051190f in parseConfigFile (file_name=0xcc9860 
"/etc/squid/squid.conf") at cache_cf.cc:585
#12 0x005ddc97 in SquidMain (argc=, argv=0x7fffe478) 
at main.cc:1523
#13 0x004e77ad in SquidMainSafe (argv=, argc=) at main.cc:1374
#14 main (argc=, argv=) at main.cc:1367

(gdb) frame 5
#5  0x007fae8c in Adaptation::ServiceConfig::grokUri 
(this=this@entry=0xcd3ad0, value=value@entry=0xcd3cf0 
"icap://atld-mcafee01.airwatch.dev:1344/") at ServiceConfig.cc:239
239 (void)ipcache_gethostbyname(host.termedBuf(), IP_LOOKUP_IF_MISS);

(gdb) frame 4
#4  0x005d95cc in ipcache_gethostbyname (name=0xcd3db0 
"atld-mcafee01.airwatch.dev", flags=flags@entry=1) at ipcache.cc:653
653 ipcache_nbgethostbyname(name, NULL, NULL);

(gdb) frame 3
#3  0x005d9033 in ipcache_nbgethostbyname (name=name@entry=0xcd3db0 
"atld-mcafee01.airwatch.dev", handler=handler@entry=0x0, 
handlerData=handlerData@entry=0x0) at ipcache.cc:561
561 idnsALookup(hashKeyStr(&i->hash), ipcacheHandleReply, c);

(gdb) frame 2
#2  0x005667ee in idnsALookup (name=0xcd4200 
"atld-mcafee01.airwatch.dev", callback=callback@entry=0x5d96a0 
, 
data=data@entry=0xcd4608)
at dns_internal.cc:1742
1742if (idnsCachedLookup(name, callback, data))

(gdb) frame 1
#1  0x0056059f in idnsCachedLookup (key=key@entry=0xcd4200 
"atld-mcafee01.airwatch.dev", callback=callback@entry=0x5d96a0 
, 
data=data@entry=0xcd4608) at dns_internal.cc:1675
1675idns_query *old = (idns_query *) hash_lookup(idns_lookup_hash, key);

(gdb) frame 0
#0  hash_lookup (hid=0x0, k=0xcd4200) at hash.cc:152
152 b = hid->hash(k, hid->size);
(gdb) 


Thanks
Aashima

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Eliezer Croitoru 
Hey William,

 

It's not clear what connection from the logs you are talking about since I do 
not see any logs about a CONNECT request.

It might be because a CONNECT is being shown in the logs after the connection 
is ended.

To verify the issue I would to verify what squid does and if a cli command like 
wget or curl from the squid box are doing the same.

There are debug logs levels that can help but try to add "dns_v4_first on" into 
the squid.conf, reload\restart and try again to see how squid works.

I am almost sure that the connection issue is related to some kind of network 
layer, you can try to see what happens when you try to access:
https://www.ngtech.co.il/

 

After we will clear this issue out there are other things which you might need 
to change\add in your squid.conf.

 

Eliezer

 



  Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il



 

From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf 
Of William Ivanski
Sent: Thursday, June 2, 2016 4:36 PM
To: William Ivanski
Cc: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Establishing secure conection problems (Chrome)

 

-> Access.log (the host 192.168.0.52 belongs to acl reqliberacaofixo):
1464870540.039495 192.168.0.52 TCP_MISS/301 675 GET  
 http://www.hotmail.com/ - HIER_DIRECT/ 
 65.55.65.188 text/html
1464870550.793  10206 192.168.0.52 TCP_MISS_ABORTED/000 0 POST  
 http://s2.symcb.com/ - HIER_DIRECT/2600:1419:8:18f::201a 
-
1464870554.259   2241 192.168.0.52 TCP_MISS_ABORTED/000 0 POST  
 http://sr.symcd.com/ - HIER_DIRECT/2600:1419:8:18f::201a 
-
1464870626.286 121662 192.168.0.52 TCP_MISS/200 2192 GET  

 
http://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEH7hSm9v7%2FLTfz%2BtZU062rQ%3D
 - HIER_DIRECT/  23.4.43.27 application/ocsp-response
1464870746.296 119912 192.168.0.52 TCP_MISS/200 2192 GET  

 
http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D
 - HIER_DIRECT/  23.4.43.27 application/ocsp-response
1464870866.307 12 192.168.0.52 TCP_MISS/200 2155 GET  

 
http://sf.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEExA26X5iPrlelfWRXSV%2BYs%3D
 - HIER_DIRECT/  23.4.43.27 application/ocsp-response
1464870866.467149 192.168.0.52 TCP_MISS/304 331 GET  

 
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
 - HIER_DIRECT/2804:a8:c800:301::bd56:7a18 application/octet-stream
1464870986.300 119824 192.168.0.52 TCP_MISS/200 654 GET  
 
http://crl.geotrust.com/crls/secureca.crl - HIER_DIRECT/  
23.4.37.163 application/pkix-crl
1464871457.106312 192.168.0.52 TCP_MISS/301 419 GET  
 http://support.microsoft.com/ - HIER_DIRECT/ 
 172.224.183.89 -
1464871477.134 45 192.168.0.52 TCP_MISS/301 340 GET  
 http://www.itau.com.br/ - HIER_DIRECT/ 
 23.10.60.73 -
1464871487.149 41 192.168.0.52 TCP_MISS/204 184 GET  
 http://www.gstatic.com/generate_204 - 
HIER_DIRECT/2800:3f0:4001:800::2003 -
1464871490.334338 192.168.0.52 TCP_MISS/302 685 GET  
 http://c1.microsoft.com/c.gif? - HIER_DIRECT/ 
 131.253.40.50 -
1464871490.841501 192.168.0.52 TCP_MISS/302 935 GET  
 http://c.bing.com/c.gif? - HIER_DIRECT/ 
 65.52.108.11 -
1464871491.004159 192.168.0.52 TCP_MISS/200 885 GET  
 http://c1.microsoft.com/c.gif? - HIER_DIRECT/ 
 131.253.40.50 image/gif
1464871507.401  60167 192.168.0.52 TCP_MISS_ABORTED/000 0 GET  

 
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D
 - HIER_DIRECT/2600:1419:8:191::201a -
1464871517.401

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Antony Stone 
On Thursday 02 June 2016 at 15:35:10, William Ivanski wrote:

> Thank you for your quick response.
> 
> First of all forgive me for the lack of information in the first
> email. I've tried to disable QUIC a few minutes ago and the problem
> persists. Follow the information requested:
> 
> -> Compilation:
> 
> I've installed squid using the following commands:
> 
> cd /usr/src
> 
> apt-get install squid3

So, that will install a working copy of Squid, and then...

> wget
> http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15-20160330-r14015.ta
> r.gz
> 
> tar xvzf squid-3.5.15-20160330-r14015.tar.gz
> 
> cd squid-3.5.15-20160330-r14015

...you download the latest source version and try to build it yourself...

> apt-get build-dep squid3 && apt-get install build-essential libssl-dev

...unfortunately using the Debian commands to build from a source package, 
which you did not download (the Debian source package is not the same as the 
Squid tarball).

You then proceed to do the standard ./configure && make && make install for 
installation from a tarball.

I wouldn't like to guess what sort of state any installed Squid is in after 
doing this bizarre combination.


I recommend installing the Debian binary package, *or* install the Debian 
source package and build from that, *or* download the source tarball and build 
that.  Do not combine these.


Regards,


Antony.

-- 
I lay awake all night wondering where the sun went, and then it dawned on me.

   Please reply to the list;
 please *don't* CC me.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] DNS lookup fails initially for FQDN in squid

2016-06-02 Thread Aashima Madaan 
Hi Amos,

After applying the patch I dont find any issues in make and make install, but 
running the file /usr/sbin/squid gives segmentation fault.

Thanks
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
cache.log require too


02.06.2016 19:36, William Ivanski пишет:
> -> Access.log (the host 192.168.0.52 belongs to acl reqliberacaofixo):
> 1464870540.039495 192.168.0.52 TCP_MISS/301 675 GET
http://www.hotmail.com/ - HIER_DIRECT/65.55.65.188 
text/html
> 1464870550.793  10206 192.168.0.52 TCP_MISS_ABORTED/000 0 POST
http://s2.symcb.com/ - HIER_DIRECT/2600:1419:8:18f::201a -
> 1464870554.259   2241 192.168.0.52 TCP_MISS_ABORTED/000 0 POST
http://sr.symcd.com/ - HIER_DIRECT/2600:1419:8:18f::201a -
> 1464870626.286 121662 192.168.0.52 TCP_MISS/200 2192 GET
http://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEH7hSm9v7%2FLTfz%2BtZU062rQ%3D
- HIER_DIRECT/23.4.43.27  application/ocsp-response
> 1464870746.296 119912 192.168.0.52 TCP_MISS/200 2192 GET
http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D
- HIER_DIRECT/23.4.43.27  application/ocsp-response
> 1464870866.307 12 192.168.0.52 TCP_MISS/200 2155 GET
http://sf.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEExA26X5iPrlelfWRXSV%2BYs%3D
- HIER_DIRECT/23.4.43.27  application/ocsp-response
> 1464870866.467149 192.168.0.52 TCP_MISS/304 331 GET
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- HIER_DIRECT/2804:a8:c800:301::bd56:7a18 application/octet-stream
> 1464870986.300 119824 192.168.0.52 TCP_MISS/200 654 GET
http://crl.geotrust.com/crls/secureca.crl - HIER_DIRECT/23.4.37.163
 application/pkix-crl
> 1464871457.106312 192.168.0.52 TCP_MISS/301 419 GET
http://support.microsoft.com/ - HIER_DIRECT/172.224.183.89
 -
> 1464871477.134 45 192.168.0.52 TCP_MISS/301 340 GET
http://www.itau.com.br/ - HIER_DIRECT/23.10.60.73  -
> 1464871487.149 41 192.168.0.52 TCP_MISS/204 184 GET
http://www.gstatic.com/generate_204 - HIER_DIRECT/2800:3f0:4001:800::2003 -
> 1464871490.334338 192.168.0.52 TCP_MISS/302 685 GET
http://c1.microsoft.com/c.gif? - HIER_DIRECT/131.253.40.50
 -
> 1464871490.841501 192.168.0.52 TCP_MISS/302 935 GET
http://c.bing.com/c.gif? - HIER_DIRECT/65.52.108.11  -
> 1464871491.004159 192.168.0.52 TCP_MISS/200 885 GET
http://c1.microsoft.com/c.gif? - HIER_DIRECT/131.253.40.50
 image/gif
> 1464871507.401  60167 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D
- HIER_DIRECT/2600:1419:8:191::201a -
> 1464871517.401  59969 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEG%2F6tqKxfdmg4KPDzqvBuK8%3D
- HIER_DIRECT/2600:1419:8:191::201a -
> 1464871522.402  60173 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcb.com/sr.crl - HIER_DIRECT/2600:1419:8:181::1abd -
> 1464871532.402  59968 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcb.com/sr.crl - HIER_DIRECT/2600:1419:8:181::1abd -
> 1464871676.152839 192.168.0.52 TCP_MISS/301 675 GET
http://www.hotmail.com/ - HIER_DIRECT/65.55.65.172 
text/html
> 1464871681.856   3654 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D
- HIER_DIRECT/2600:1419:8:191::201a -
> 1464871690.823 62 192.168.0.52 TCP_MISS/200 889 POST
http://ocsp.digicert.com/ - HIER_DIRECT/192.16.58.8 
application/ocsp-response
> 1464871690.880 52 192.168.0.52 TCP_MISS/200 889 POST
http://ocsp.digicert.com/ - HIER_DIRECT/192.16.58.8 
application/ocsp-response
> 1464871694.282312 192.168.0.52 TCP_MISS/302 948 GET
http://www.google.com.br/ - HIER_DIRECT/2607:f8b0:4002:c0c::5e text/html
> 1464871694.785180 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response
> 1464871704.519186 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response
> 1464871705.113173 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response
> 1464871705.485183 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response
> 1464871705.748179 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response
> 1464871707.725177 192.

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread William Ivanski 
-> Access.log (the host 192.168.0.52 belongs to acl reqliberacaofixo):

1464870540.039495 192.168.0.52 TCP_MISS/301 675 GET
http://www.hotmail.com/ - HIER_DIRECT/65.55.65.188 text/html

1464870550.793  10206 192.168.0.52 TCP_MISS_ABORTED/000 0 POST
http://s2.symcb.com/ - HIER_DIRECT/2600:1419:8:18f::201a -

1464870554.259   2241 192.168.0.52 TCP_MISS_ABORTED/000 0 POST
http://sr.symcd.com/ - HIER_DIRECT/2600:1419:8:18f::201a -

1464870626.286 121662 192.168.0.52 TCP_MISS/200 2192 GET
http://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEH7hSm9v7%2FLTfz%2BtZU062rQ%3D
- HIER_DIRECT/23.4.43.27 application/ocsp-response

1464870746.296 119912 192.168.0.52 TCP_MISS/200 2192 GET
http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D
- HIER_DIRECT/23.4.43.27 application/ocsp-response

1464870866.307 12 192.168.0.52 TCP_MISS/200 2155 GET
http://sf.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEExA26X5iPrlelfWRXSV%2BYs%3D
- HIER_DIRECT/23.4.43.27 application/ocsp-response

1464870866.467149 192.168.0.52 TCP_MISS/304 331 GET
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- HIER_DIRECT/2804:a8:c800:301::bd56:7a18 application/octet-stream

1464870986.300 119824 192.168.0.52 TCP_MISS/200 654 GET
http://crl.geotrust.com/crls/secureca.crl - HIER_DIRECT/23.4.37.163
application/pkix-crl

1464871457.106312 192.168.0.52 TCP_MISS/301 419 GET
http://support.microsoft.com/ - HIER_DIRECT/172.224.183.89 -

1464871477.134 45 192.168.0.52 TCP_MISS/301 340 GET
http://www.itau.com.br/ - HIER_DIRECT/23.10.60.73 -

1464871487.149 41 192.168.0.52 TCP_MISS/204 184 GET
http://www.gstatic.com/generate_204 -
HIER_DIRECT/2800:3f0:4001:800::2003 -

1464871490.334338 192.168.0.52 TCP_MISS/302 685 GET
http://c1.microsoft.com/c.gif? - HIER_DIRECT/131.253.40.50 -

1464871490.841501 192.168.0.52 TCP_MISS/302 935 GET
http://c.bing.com/c.gif? - HIER_DIRECT/65.52.108.11 -

1464871491.004159 192.168.0.52 TCP_MISS/200 885 GET
http://c1.microsoft.com/c.gif? - HIER_DIRECT/131.253.40.50 image/gif

1464871507.401  60167 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D
- HIER_DIRECT/2600:1419:8:191::201a -

1464871517.401  59969 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEG%2F6tqKxfdmg4KPDzqvBuK8%3D
- HIER_DIRECT/2600:1419:8:191::201a -

1464871522.402  60173 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcb.com/sr.crl - HIER_DIRECT/2600:1419:8:181::1abd -

1464871532.402  59968 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcb.com/sr.crl - HIER_DIRECT/2600:1419:8:181::1abd -

1464871676.152839 192.168.0.52 TCP_MISS/301 675 GET
http://www.hotmail.com/ - HIER_DIRECT/65.55.65.172 text/html

1464871681.856   3654 192.168.0.52 TCP_MISS_ABORTED/000 0 GET
http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEGU3b%2BNLNLmDFl%2F0STiGxMc%3D
- HIER_DIRECT/2600:1419:8:191::201a -

1464871690.823 62 192.168.0.52 TCP_MISS/200 889 POST
http://ocsp.digicert.com/ - HIER_DIRECT/192.16.58.8
application/ocsp-response

1464871690.880 52 192.168.0.52 TCP_MISS/200 889 POST
http://ocsp.digicert.com/ - HIER_DIRECT/192.16.58.8
application/ocsp-response

1464871694.282312 192.168.0.52 TCP_MISS/302 948 GET
http://www.google.com.br/ - HIER_DIRECT/2607:f8b0:4002:c0c::5e
text/html

1464871694.785180 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871704.519186 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871705.113173 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871705.485183 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871705.748179 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871707.725177 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871708.014188 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-response

1464871708.768186 192.168.0.52 TCP_MISS/200 847 POST
http://clients1.google.com/ocsp - HIER_DIRECT/2800:3f0:4001:801::200e
application/ocsp-r

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread William Ivanski 
Thank you for your quick response.

First of all forgive me for the lack of information in the first
email. I've tried to disable QUIC a few minutes ago and the problem
persists. Follow the information requested:

-> Compilation:

I've installed squid using the following commands:

cd /usr/src

apt-get install squid3

wget 
http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15-20160330-r14015.tar.gz

tar xvzf squid-3.5.15-20160330-r14015.tar.gz

cd squid-3.5.15-20160330-r14015

apt-get build-dep squid3 && apt-get install build-essential libssl-dev

./configure --enable-icap-client --enable-ssl --enable-ssl-crtd
--prefix=/usr --includedir=/usr/include --mandir=/usr/share/man
--infodir=/usr/share/info --sysconfdir=/etc --localstatedir=/var
--libexecdir=/lib/squid3 --srcdir=. --datadir=/usr/share/squid3
--sysconfdir=/etc/squid3 --mandir=/usr/share/man
--with-default-user=squid --with- cppunit-config-basedir=/usr
--with-logdir=/var/log/squid3 --with-pidfile=/var/run/squid3.pid
--with-openssl --disable-optimizations --disable-arch-native

service squid3 stop

make all && make install

useradd squid && chown -R squid:squid /var/log/squid3

mv /usr/sbin/squid3 /usr/sbin/squid3.old && mv/usr/sbin/squid
/usr/sbin/squid3

/lib/squid3/ssl_crtd -c -s /var/lib/ssl_db -M 4 MB

chown -R squid:squid /var/lib/ssl_db

service squid3 restart && service squid3 stop && chmod 777
/var/spool/squid3 && squid3 -z && service squid3 restart

OBS: We're not using ssl_crtd/ssl_db anymore. Our previous squid conf
was using intercept, but the actual one isn't configured as
transparent proxy.

-> Platform of the gateway:

Distributor ID: Debian

Description:Debian GNU/Linux 8.4 (jessie)

Release:8.4

Codename:   jessie

-> Squid:

Squid Cache: Version 3.5.15-20160324-r14011

Service Name: squid

configure options:  '--enable-icap-client' '--enable-ssl'
'--enable-ssl-crtd' '--prefix=/usr' '--includedir=/usr/include'
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--libexecdir=/lib/squid3' '--srcdir=.' '--datadir=/usr/share/squid3'
'--sysconfdir=/etc/squid3' '--mandir=/usr/share/man'
'--with-default-user=squid' '--with-cppunit-config-basedir=/usr'
'--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid'
'--with-openssl' '--disable-arch-native'

-> Squid.conf:

http_port 3128

visible_hostname gateway

cache_mgr will...@planningservice.com.br

error_directory /usr/share/squid3/errors/Portuguese

access_log /var/log/squid3/access.log

hierarchy_stoplist cgi-bin ?

cache_mem 2048 MB

maximum_object_size_in_memory 100 MB

cache_dir ufs /var/spool/squid3 307200 16 256

maximum_object_size 4096 MB

minimum_object_size 0 MB

cache_swap_low 90

cache_swap_high 95

refresh_pattern ^ftp: 360   20% 2280

refresh_pattern -i (/cgi-bin/|\?) 0 0%  0

refresh_pattern . 0 20% 2280

cache_log /var/log/squid3/cache.log

acl localhost src 127.0.0.1/32

acl localnet src 192.168.0.0/24

acl localnetd dst 192.168.0.0/24

acl manager proto cache_object

http_access allow manager localhost

http_access deny manager

acl purge method PURGE

http_access allow purge localhost

http_access deny purge

acl Safe_ports port 21

acl Safe_ports port 70

acl Safe_ports port 80

acl Safe_ports port 210

acl Safe_ports port 280

acl Safe_ports port 443

acl Safe_ports port 488

acl Safe_ports port 563

acl Safe_ports port 591

acl Safe_ports port 631

acl Safe_ports port 777

acl Safe_ports port 873

acl Safe_ports port 901

acl Safe_ports port 1025-65535

http_access deny !Safe_ports

acl SSL_ports port 443

acl SSL_ports port 563

acl SSL_ports port 873

acl connect method CONNECT

http_access deny connect !SSL_ports

acl FTP proto FTP

always_direct allow FTP

acl reqliberacaotmp src "/etc/firewall/ips_liberados_tmp.txt"

acl reqliberacaofixo src "/etc/firewall/ips_liberados_fixo.txt"

http_access allow reqliberacaotmp reqliberacaofixo

acl sitesliberadosfixo dstdom_regex -i "/etc/firewall/sites_liberados_fixo.txt"

acl sitesliberadostmp dstdom_regex -i "/etc/firewall/sites_liberados_tmp.txt"

acl almoco time MTWHF 11:50-13:30

acl manha time MTWHF 00:01-08:30

acl noite time MTWHF 18:00-23:59

http_access allow localhost sitesliberadosfixo

http_access allow localhost sitesliberadostmp

http_access allow localnet sitesliberadosfixo

http_access allow localnet sitesliberadostmp

http_access allow localhost almoco

http_access allow localnet almoco

http_access allow localhost manha

http_access allow localnet manha

http_access allow localhost noite

http_access allow localnet noite

http_access deny !sitesliberadosfixo !sitesliberadostmp
!reqliberacaotmp !reqliberacaofixo

http_access allow localhost

http_access allow localnet

http_access allow localnetd

http_access deny !localhost !localnet !localnetd

http_access deny all



I'll send access.log in next e-mail, otherwise message body will be too big.



William

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Yuri Voinov 

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
 
QUIC already unused by Google against HTTP/2. And better to do this (if
you need) at active network equipement level.

Otherwise you be forced to do this with hands on _every_ user Chrome by
legs.


02.06.2016 18:16, Sagar Malve пишет:
> Try disabling QUIC Protocol in Chrome and check ... in Chrome Browser : Type 
> : chrome://flags/ --->
find QUIC and Disable it.
>
> It will not accept the Squid SSL Certificate unless you disable this
Protocol ...
>
> Let us know if it works 
>
> Regards
> Sagar Malve
>
> On Thu, Jun 2, 2016 at 5:39 PM, Yuri mailto:yvoi...@gmail.com>> wrote:
>
> Any useful info? Squid version, config, logs?
>
> Thelepaty on vacation.
>
>
> 02.06.2016 18:03, William Ivanski пишет:
>> Good time of the day!
>>
>> I've started experiencing some problems with Google Chrome after
installing Squid in my Network. It gets stuck into a loop of
"Establishing secure connection". Sometimes it succeeds loading the web
pages, but usually it cannot. It's really annoying and occurs just in
Chrome. I've already tested in Firefox and Microsoft Edge and it's alright.
>>
>> Any suggestions?
>>
>> Thanks and regards!
>>
>>
>> William Ivanski
>>
>>
>> ___
>> squid-users mailing list
>> squid-users@lists.squid-cache.org

>> http://lists.squid-cache.org/listinfo/squid-users
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org

> http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXUCffAAoJENNXIZxhPexGGJcIAI5KhV0CYzMgmTF8mXYbs2+z
UhuI2L1re4vnP/6xZW7cL+UNmIdNX1yZfDYYG476+dx8Tz18YQiMzalSD9U/hZdZ
6bIQFldbfMKdEz2WdrYJA03zBnLBZhqIo0SptdeCv4276S6W5wI5ruU95XVWV3yk
NLRHZMehHqOfyvkN1p9KrM9RvL3vhUtA2k40BPSDP6ABPXX+M0DrHK6Zx4OZIzCw
N/d6oenNrgAviFRzNwT50vbFHSpAciNJczvG7dQ58o6xWF4u8toI968sdKAGcFfu
8G1AMU7qWppduLA7U0r/uxT5XdvyuYDElecj31/q9rl/NKYk+iAJ786aEITMi0Q=
=zgTB
-END PGP SIGNATURE-



0x613DEC46.asc
Description: application/pgp-keys
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Sagar Malve 
Try disabling QUIC Protocol in Chrome and check ... in Chrome Browser :
Type : chrome://flags/ ---> find QUIC and Disable it.

It will not accept the Squid SSL Certificate unless you disable this
Protocol ...

Let us know if it works 

Regards
Sagar Malve

On Thu, Jun 2, 2016 at 5:39 PM, Yuri  wrote:

> Any useful info? Squid version, config, logs?
>
> Thelepaty on vacation.
>
> 02.06.2016 18:03, William Ivanski пишет:
>
> Good time of the day!
>
> I've started experiencing some problems with Google Chrome after
> installing Squid in my Network. It gets stuck into a loop of "Establishing
> secure connection". Sometimes it succeeds loading the web pages, but
> usually it cannot. It's really annoying and occurs just in Chrome. I've
> already tested in Firefox and Microsoft Edge and it's alright.
>
> Any suggestions?
>
> Thanks and regards!
>
>
> William Ivanski
>
>
> ___
> squid-users mailing 
> listsquid-users@lists.squid-cache.orghttp://lists.squid-cache.org/listinfo/squid-users
>
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Antony Stone 
On Thursday 02 June 2016 at 14:03:33, William Ivanski wrote:

> I've started experiencing some problems with Google Chrome after installing
> Squid in my Network.

> Any suggestions?

Yes - tell us how you installed squid, which version you installed, which 
platform (O/S and version) you installed it on, show us your squid.conf file 
without comments or blank lines, and show us what shows up in the Squid 
access.log when you get the problems with Chrome.

Otherwise, as Yuri says, you'll need a telepath to help you.


Antony.

-- 
Most people have more than the average number of legs.

   Please reply to the list;
 please *don't* CC me.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread Yuri 

Any useful info? Squid version, config, logs?

Thelepaty on vacation.


02.06.2016 18:03, William Ivanski пишет:

Good time of the day!

I've started experiencing some problems with Google Chrome after 
installing Squid in my Network. It gets stuck into a loop of 
"Establishing secure connection". Sometimes it succeeds loading the 
web pages, but usually it cannot. It's really annoying and occurs just 
in Chrome. I've already tested in Firefox and Microsoft Edge and it's 
alright.


Any suggestions?

Thanks and regards!


William Ivanski


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Establishing secure conection problems (Chrome)

2016-06-02 Thread William Ivanski 
Good time of the day!

I've started experiencing some problems with Google Chrome after installing
Squid in my Network. It gets stuck into a loop of "Establishing secure
connection". Sometimes it succeeds loading the web pages, but usually it
cannot. It's really annoying and occurs just in Chrome. I've already tested
in Firefox and Microsoft Edge and it's alright.

Any suggestions?

Thanks and regards!


William Ivanski
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] google drive up-/download size in squidlog

2016-06-02 Thread Paul Buechler 

Hi,

@Yuri Voinov:

I've only tested it with the webclient.

@Amos Jeffries:

I've tested it with %st and the downloadsize is fine for me now, thanks.

Are there any plans to implement a format code to see the uploadsize?
It would be nice to have this feature.

best regards,

Paul

Am 24.05.2016 um 20:32 schrieb Amos Jeffries:

On 24/05/2016 8:15 p.m., Paul Buechler wrote:

Hello there,

i've got the problem that i can't see the size of uploades to google
drive in the access.log. Also the downloads aren't visible to me.
Is this a problem caused by HTTPS? I tried changing the logformat but
this didn't helped.

All the normal logs are recording teh data transferred to client. NOt
from client.

You need to create a custom logformat of your own which uses the %st
code instead of the %http://www.squid-cache.org/Doc/config/logformat/>


best regards,
Paul


systeminformation:

ubuntu 14.04.4 Server
squid: Version 3.3.8
squid logformat: logformat combined   %>a %[ui %[un [%tl] "%rm %ru
HTTP/%rv" %>Hs %h" "%{User-Agent}>h" %Ss:%Sh
also tested:
logformat squid%ts.%03tu %6tr %>a %Ss/%03>Hs %a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %a %{Referer}>h %ru
logformat useragent%>a [%tl] "%{User-Agent}>h"


Please do not re-define the built in format names. Use a name of your
own. Unexpected and probably not good things will happen.

Amos

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users