Sample Log File - Squid Net Cache Log File Format

This article applies to:

• Firewall Suite 4.X

Question:

Information:

Log File Field Structure Definitions:

• Timestamp
  The time when the client socket is closed. The format is "Unix time" (seconds since Jan 1, 1970) with millisecond resolution. This can be modified to visible format by "cat access.log | perl -nwe s/^(\d+)/localtime($1)/e; print".

• Elapsed Time
  The elapsed time of the request, in milliseconds. This is time between the accept() and close() of the client socket.

• Client Address
  The IP address of the connecting client, or the FQDN if the 'log_fqdn' option is enabled in the config file.

• Log Tag / HTTP Code
  The Log Tag describes how the request was treated locally (hit, miss, etc). All the tags are described in the link provided in the "Related Topics" section below. The HTTP code is the reply code taken from the first line of the HTTP reply header. Non-HTTP requests may have zeroreply codes.

• Size
  The number of bytes written to the client.

• Request Method
  The HTTP request method, or ICP_QUERY for ICP requests.

• URL
  The requested URL.

• Ident
  If 'ident_lookup' is enabled, this field may contain the user name associated with the client connection as derived from the ident service.

• Hierarchy Data / Hostname
  A description of how and where the requested object was fetched.

• Content Type
  The Content-type field from the HTTP reply.

This article was previously published as:

NETIQKB2418