[cut] > > > "probably"? "probably", because i am not confident enough with my understanding with the output. [cut] > > > The '<' means data sent to client. The '>' means data received from client. > The format omitting these characters is the total sum of both. > the confusion part is the actual value that i am looking for whether in upload or download. value always comes in "<" with this value not with ">" for example here is when i uploaded 2.2 MB of file to live.com 1355559811.654 485143 10.51.100.240 TCP_MISS/200 18155070 181 CONNECT snt121.mail.live.com:443 - DIRECT/65.55.68.103 in this log i am download approx 3.2 MB of file 1355739469.389 11759 10.51.100.240 TCP_MISS/200 4077890 1917 GET http://software-files-a.cnet.com/s/software/12/84/20/79/ccsetup325.exe? - DIRECT/92.122.213.10 application/octet-stream however in both logs you can see two values 1) 18155070 181 (upload log) , 2) 4077890 1917 (download log) so the question is. does "<" (value) with method "CONNECT" means data sent to client and on the other hand "<" (value) with method "GET" means data receive from the client? are they totally inverse of each other when methods are change. > Amos >
