Re: [squid-users] customize logformat to see header
Hi Chris. I follow your description and its work now. Thank you.
Regards,
Zul
--- On Wed, 11/19/08, Chris Robertson [EMAIL PROTECTED] wrote:
From: Chris Robertson [EMAIL PROTECTED]
Subject: Re: [squid-users] customize logformat to see header
To: squid-users@squid-cache.org
Date: Wednesday, November 19, 2008, 6:08 AM
zulkarnain wrote:
Hi,
I'm trying to modify logformat to display header
of this folowing websites. My purpose is to be able to use
the correct pattern for refresh_pattern. Here are my rules
acl googlevideo url_regex -i googlevideo\.com
acl kaspersky url_regex -i kaspersky\.com
acl kaspersky-labs url_regex -i
kaspersky-labs\.com
acl metacafe url_regex -i metacafe\.com
acl apple url_regex -i phobos\.apple\.com
acl pornhub url_regex -i pornhub\.com
Better to use dstdomain.
acl googlevideo dstdomain .googlevideo.com
acl kapersky dstdomain .kapersky.com
...
logformat squid %ts.%03tu %6tr %a %Ss/%03Hs
%st %rm %ru %un %Sh/%A %mt
logformat analisa %{%H:%M:%S}tl %-13a %-6st
%03Hs %-17Ss %-24mt %-6tr %ru *REQ* *C:%{Cache-Control}h
*P:%{Pragma}h *LMS:
%{Last-Modified}h *REP*
*C:%{Cache-Control}h *P:%{Pragma}h
*LMS:%{Last-Modified}h *Exp:%{Expires}h
access_log /var/log/squid/analisa.log analisa
googlevideo kaspersky kaspersky-labs metacafe apple pornhub
According to
http://www.squid-cache.org/Doc/config/access_log/*, the
ACLs are ANDed together, just like with http_access lines.
The only way something is going to be logged with this
format is if the domain matches all of your url_regex lines.
http://gooGLevideo.compornhub.COMandKAPersky-labs.comMetacafe.com-anythinggoeshere-phobos.apple.com...
You'll need one access_log line for each of the ACLs.
access_log /var/log/squid/access.log squid
The rules above did not work. The file analisa.log is
empty even after I accessed several websites above. Did I
miss something? Any help would be greatly appreciated.
Rgds,
Zul
Chris
*Will log to the specified file ... those entries
which match ALL the acl's specified (which must be
defined in acl clauses). If no acl is specified, all
requests will be logged to this file.
[squid-users] customize logformat to see header
Hi,
I'm trying to modify logformat to display header of this folowing websites. My
purpose is to be able to use the correct pattern for refresh_pattern. Here are
my rules
acl googlevideo url_regex -i googlevideo\.com
acl kaspersky url_regex -i kaspersky\.com
acl kaspersky-labs url_regex -i kaspersky-labs\.com
acl metacafe url_regex -i metacafe\.com
acl apple url_regex -i phobos\.apple\.com
acl pornhub url_regex -i pornhub\.com
logformat squid %ts.%03tu %6tr %a %Ss/%03Hs %st %rm %ru %un %Sh/%A %mt
logformat analisa %{%H:%M:%S}tl %-13a %-6st %03Hs %-17Ss %-24mt %-6tr %ru
*REQ* *C:%{Cache-Control}h *P:%{Pragma}h *LMS:
%{Last-Modified}h *REP* *C:%{Cache-Control}h *P:%{Pragma}h
*LMS:%{Last-Modified}h *Exp:%{Expires}h
access_log /var/log/squid/analisa.log analisa googlevideo kaspersky
kaspersky-labs metacafe apple pornhub
access_log /var/log/squid/access.log squid
The rules above did not work. The file analisa.log is empty even after I
accessed several websites above. Did I miss something? Any help would be
greatly appreciated.
Rgds,
Zul
Re: [squid-users] customize logformat to see header
zulkarnain wrote:
Hi,
I'm trying to modify logformat to display header of this folowing websites. My
purpose is to be able to use the correct pattern for refresh_pattern. Here are
my rules
acl googlevideo url_regex -i googlevideo\.com
acl kaspersky url_regex -i kaspersky\.com
acl kaspersky-labs url_regex -i kaspersky-labs\.com
acl metacafe url_regex -i metacafe\.com
acl apple url_regex -i phobos\.apple\.com
acl pornhub url_regex -i pornhub\.com
Better to use dstdomain.
acl googlevideo dstdomain .googlevideo.com
acl kapersky dstdomain .kapersky.com
...
logformat squid %ts.%03tu %6tr %a %Ss/%03Hs %st %rm %ru %un %Sh/%A %mt
logformat analisa %{%H:%M:%S}tl %-13a %-6st %03Hs %-17Ss %-24mt %-6tr %ru *REQ*
*C:%{Cache-Control}h *P:%{Pragma}h *LMS:
%{Last-Modified}h *REP* *C:%{Cache-Control}h *P:%{Pragma}h
*LMS:%{Last-Modified}h *Exp:%{Expires}h
access_log /var/log/squid/analisa.log analisa googlevideo kaspersky
kaspersky-labs metacafe apple pornhub
According to http://www.squid-cache.org/Doc/config/access_log/*, the
ACLs are ANDed together, just like with http_access lines. The only way
something is going to be logged with this format is if the domain
matches all of your url_regex lines.
http://gooGLevideo.compornhub.COMandKAPersky-labs.comMetacafe.com-anythinggoeshere-phobos.apple.com...
You'll need one access_log line for each of the ACLs.
access_log /var/log/squid/access.log squid
The rules above did not work. The file analisa.log is empty even after I
accessed several websites above. Did I miss something? Any help would be
greatly appreciated.
Rgds,
Zul
Chris
*Will log to the specified file ... those entries which match ALL the
acl's specified (which must be defined in acl clauses). If no acl is
specified, all requests will be logged to this file.
Re: [squid-users] customize logformat to see header
Hi,
I'm trying to modify logformat to display header of this folowing
websites. My purpose is to be able to use the correct pattern for
refresh_pattern. Here are my rules
acl googlevideo url_regex -i googlevideo\.com
acl kaspersky url_regex -i kaspersky\.com
acl kaspersky-labs url_regex -i kaspersky-labs\.com
acl metacafe url_regex -i metacafe\.com
acl apple url_regex -i phobos\.apple\.com
acl pornhub url_regex -i pornhub\.com
Please, use dstdomain for this type of matching. It's much faster than regex.
logformat squid %ts.%03tu %6tr %a %Ss/%03Hs %st %rm %ru %un %Sh/%A %mt
logformat analisa %{%H:%M:%S}tl %-13a %-6st %03Hs %-17Ss %-24mt %-6tr
%ru *REQ* *C:%{Cache-Control}h *P:%{Pragma}h *LMS:
%{Last-Modified}h *REP* *C:%{Cache-Control}h *P:%{Pragma}h
*LMS:%{Last-Modified}h *Exp:%{Expires}h
access_log /var/log/squid/analisa.log analisa googlevideo kaspersky
kaspersky-labs metacafe apple pornhub
access_log /var/log/squid/access.log squid
The rules above did not work. The file analisa.log is empty even after I
accessed several websites above. Did I miss something? Any help would be
greatly appreciated.
The h and h bit goes before the {}.
For example: %h{Expires}
Amos
