On 16/11/2011 10:59 p.m., Paolo Supino wrote:
Hi
in the case of TCP_MISS/400 does the 400 refer to the HTTP error
code returned from the web server?
It is the status code sent to the client. There could be multiple server
status codes encounterd during the processing. If the hierarchy details
field later on the line contains a server IP/name it is likely to be
relayed from that server. Although that is no guarantee either, squid
could be returning a stale 400 response after a 5xx result from the server.
PS. this is access.log.
http://wiki.squid-cache.org/Features/LogFormat#Squid_native_access.log_format_in_detail
http://wiki.squid-cache.org/SquidFaq/SquidLogs#access.log
Amos
