On 11/08/2017 04:38 PM, Jeffrey Dunham wrote:

> logformat squid %ts.%03tu %6tr %>a %>A %Ss/%03>Hs %<st %>st %rm %ru %un
> %Sh/%<A %mt
> 
> And my logs for a 200MB upload look like (this is broken into a
> multipart upload):
> 
> 1510181731.211  53953 <ip> <vpn> TCP_TUNNEL/200 3521 41 CONNECT 
> s3.amazonaws.com:443...
> 1510181731.991  54721 <ip> <vpn> TCP_TUNNEL/200 3865 41 CONNECT 
> s3.amazonaws.com:443...
> 1510181733.884  56646 <ip> <vpn> TCP_TUNNEL/200 3865 41 CONNECT 
> s3.amazonaws.com:443...
> 1510181737.049  59783 <ip> <vpn> TCP_TUNNEL/200 4209 41 CONNECT 
> s3.amazonaws.com:443...
> 1510181737.794  61246 <ip> <vpn> TCP_TUNNEL/200 5592 41 CONNECT 
> s3.amazonaws.com:443...

Sounds like the recently fix bug #4653 (%st lies about tunneled traffic
volumes): https://bugs.squid-cache.org/show_bug.cgi?id=4653

Alex.
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to