On 16/11/2012 11:38 a.m., Soporte Técnico wrote:
There´s any way to configure SARG to list topsites downloaded VIA DIRECT ONLY and not via parents? I need to know the sites that more use the DIRECT connection of my squid. Jorge.
?? you are very unlikely to see any sites that ONLY go via direct, unless you configured it to happen for some sites. The parent proxy going down has rarely ever anything to do with the URL being requested and the URL which can kill a parent are always seen to go there *as well* as DIRECT - same for the requests going to an overloaded parent.
I would grep the access.log into another file using a pattern that scanned for " DIRECT/", then process that other file for commonly seen URLs. Maybe also for ORIGINAL_DST, which is a new variant of DIRECT connection.
I can't speak about SARG coniguration since I don't use that third-party tool. maybe someone else will chiime in, or you could go to the SARG project for help.
Amos
