I am using squid 3.3.x. I am trying to build my own logformat. While doing
so, I noticed something strange. The documentation for 3.3's log format
directive shows:
Time related format codes:
ts Seconds since epoch
tu subsecond time (milliseconds)
[…]
tr Response time (milliseconds)
dt Total time spent making DNS lookups (milliseconds)
However, the default "squid" logformat is:
#logformat squid %ts.%03tu %6tr %>a %Ss/%03>Hs %<st %rm %ru %[un %Sh/%<a
%mt
So, looking at this, %tu is made 3-characters long, zero filled, which makes
sense as it's milliseconds, so between 0 and 999. However, %tr, which is also
documented to be milliseconds, is formatted into a 6-character space. Is %tr
actually in microseconds? In which case, what about %dt?
Thanks.
- Chris
