On Wed, 11 Feb 2004 [EMAIL PROTECTED] wrote: > 1076430050.466 10759 10.8.12.119 TCP_MISS/200 2464 CONNECT www.forbes.com:443 - > DIRECT/63.240.4.179 - > 1076430360.849 1089 10.8.12.119 TCP_MISS/200 1705 GET > http://updates.hotbar.com/updates/hotbar/buttons/v3.0/buttondir.xip - > DIRECT/165.254.12.203 application/octet-stream
Ok. This is standard Squid access log format. Your SARG should be able to read this fine. You can try using the -x -z -m SARG debug flags. Maybe this will make it clearer on what is going on. Start with -z, if everything looks correct there try the other options.. Regards Henrik
