>>Correct. >>The access.log timestamp is when the response is completed. The request arrived at Squid at timetamp - duration. >>In the above numbers the request was parsed by Squid at >> 1329010048.720 s - 30194 ms = 1329010018.526 s >>and forwarded slightly after. >Understood. Thanks. Is there anything I can do? If, for instance, a user tries to upload a file that takes longer than two minutes the NTLM connection breaks, and >they are prompted with new credentials, and the upload is aborted. This is more real life than my test scenario, but that still happens, too. >I attempted to add "persistent_request_timeout 6 minutes", but that did not achieve the desired effect. Let me correct that. This change did achieve the desired effect when using squid directly. I am also using dansguardian in front of squid, and need to look at the way it's closing connections after 2 minutes.