> > 1077206929.504 307 <local squid/firewall IP> TCP_MISS/200 173 GET > <remote URL> - DIRECT/<remote IP> text/plain > > The <local squid/firewall> is always the same, which makes it impossible > for me to track down the client going by squid's access log. > Did you enable this header httpd_accel_uses_host_header,emulate_httpd_log?
Regards, Muthukumar.