Hallo, alexus, Du meintest am 09.09.11: >>> 66.55.138.70 - - [08/Sep/2011:18:59:26 +0000] "GET >>> http://ecs.amazonaws.com/onca/xml? HTTP/1.1" 200 135861 "-" >>> "Mozilla/4.1" TCP_MISS:DIRECT >> That line shows that the machine 66.55.138.70 tries to get a >> document from http://ecs.amazonaws.com/onca/xml >> And it gets the document (with about 130 kByte). > 66.55.138.70 is actually my own IP, in this log you can't really see > real remote IP, but that's not an issue > I just have alot of request like this, so I want to somehow do some > sort of capture to see what's going on there... Sorry - your client machine 66.55.138.70 requests a document from ecs.amazon.com - ask the user of this machine why he oder she wants this document. "squid" only manages the transfer. Viele Gruesse! Helmut
