Chris, Thank you for your reply, but unless I'm unclear about the meaning of http code 302, I still need to consider lines with code 302 as some contain legitimate site visits. Is there any way to configure squid to avoid these? Peter Kulig Information Services Milwaukee Public Museum -----Original Message----- From: Chris Robertson [mailto:crobertson@xxxxxxx] Sent: Friday, October 06, 2006 1:56 PM To: squid-users@xxxxxxxxxxxxxxx Subject: Re: File type logging Kulig, Peter wrote: > Hello everyone, > > Just a quick question: > Running SquidNT 2.6.STABLE3-NT mainly to track internet usage. Dispersed through my access logs are entries that do not match the content type. For example: > > 1159464511 192.168.3.15 mpm\gomez http://www.tmj4.com/_content/about/img/spacer.gif GET 302 text/html > > As you can see, the spacer.gif is reported as text/html. I wrote an analysis application that filters out non - html entries based on that last field, and these entries make the output nearly unreadable. > > Any ideas how to get rid of these? > > As always, thanks to everyone that keeps this list going. > > Peter Kulig > Information Services > Milwaukee Public Museum > > The response is a 302 (moved temporarily), so the served content type is not image/gif as the file name implies. Perhaps your analysis would benefit from focusing strictly on status code 200 replies. Chris
