RE: [squid-users] Custom Log

Hi.

Ive just implemented a simple modification to use the >st TOKEN in access_log.c. I have turned on
log_mime_hdrs so that this works.

My patch is as follows:

Ive uncommented the line LFT_REQUEST_SIZE_TOTAL,
and { ">st", LFT_REQUEST_SIZE_TOTAL },

then added the following later on in the code

        case LFT_REQUEST_SIZE_TOTAL:
            outint = strlen(al->headers.request);
            doint = 1;
            break;

My squid.conf logformat line looks like this:
logformat common %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st %Ss:%Sh %>st

The output I get howerver is this:
10.0.6.66 - - [22/Mar/2006:20:26:04 +0200] "GET
http://ly.lygo.com/ly/wired/news/images/thumb/bio-oil1_t.gif HTTP/1.0" 200 3228 TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:05 +0200] "GET
http://ly.lygo.com/ly/wired/news/images/thumb/eliot2.gif HTTP/1.0" 200 4701 TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:06 +0200] "GET
http://ly.lygo.com/ly/wired/news/images/thumb/forbescars1_t.gif HTTP/1.0" 200 4503 TCP_MISS:DIRECT
231
10.0.6.66 - - [22/Mar/2006:20:26:06 +0200] "GET
http://ly.lygo.com/ly/wired/news/images/thumb/tagcloud_t.gif HTTP/1.0" 200 4538 TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:07 +0200] "GET
http://ly.lygo.com/ly/wired/shared/images/cs3/icon13sec_technology.gif HTTP/1.0" 200 592
TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:07 +0200] "GET
http://ly.lygo.com/ly/wired/news/images/thumb/oldsounds1_t.gif HTTP/1.0" 200 4503 TCP_MISS:DIRECT
231
10.0.6.66 - - [22/Mar/2006:20:26:07 +0200] "GET http://ly.lygo.com/ly/wired/wired/covers/sm14_04.jpg
HTTP/1.0" 200 12144 TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:08 +0200] "GET
http://ly.lygo.com/ly/wired/news/images/thumb/flysearch_t.gif HTTP/1.0" 200 4726 TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:08 +0200] "GET
http://ly.lygo.com/ly/wired/shared/images/cs3/promo_Breaking_News_on.gif HTTP/1.0" 200 1018
TCP_MISS:DIRECT 231
10.0.6.66 - - [22/Mar/2006:20:26:08 +0200] "GET
http://ly.lygo.com/ly/wired/shared/images/cs3/tab_space.gif HTTP/1.0" 200 529 TCP_MISS:DIRECT 231

My question is this, the last value, 231 seems to repeat, the site i entered in the browser was
"www.wired.com". Is that for each of those images/pages/lines its still the original request of
"www.wired.com" so all the request_size_total remains the same? Or is there something I have done
wrong and am not picking up?

Regards
/Cole

-----Original Message-----
From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
Sent: Monday, March 20, 2006 3:24 PM
To: cole@opteqint.net
Cc: 'Squid Users'
Subject: Re: [squid-users] Custom Log

m�n 2006-03-20 klockan 13:28 +0200 skrev Cole:

> Ive been looking at the custom log. And I see theres a token for LFT_REQUEST_SIZE_TOTAL.
> However, looking at the rest of the code, I see that it actually hasnt been coded, and its just
been
> set out for later development obviously.

Correct.

> I was wondering if anyone has actually done anything to get this token working yet or not? Or
> exactly where about I can get the actual data that this token would use. Or to get this token
> working.

The request body size is available as the Content-Length request header.
As this can be extracted using the existing request header tag no
shortcut tag has yet been implemented.

The request header size is available as the size of al->headers.request
if log_mime_hdrs is enabled, but for correctness it should be added as
an additional field in the request_t and filled in by the client side
routines while parsing the request... As the first is only available if
log_mime_hdrs is enabled it has not been considered a good approach for
implementation.

Regards
Henrik
Received on Wed Mar 22 2006 - 11:36:06 MST