On 12/20/2016 09:09 PM, wei wrote: > Below is two Get and Post commands and you can see there is no > difference with their total size(%st 3520) in the logs: > > curl --proxy 48.96.17.25:3128 https://showip.net > curl --proxy 48.96.17.25:3128 -d'test' https://showip.net > > 1482292236.816 1700 48.96.17.25 TCP_TUNNEL/200 3408*112 3520 *0 112 > CONNECT showip.net:443 - HIER_DIRECT/showip.net:23.253.100.206 - > 1482292258.735 1234 48.96.17.25 TCP_TUNNEL/200 3408*112 3520 *0 112 > CONNECT showip.net:443 - HIER_DIRECT/showip.net:23.253.100.206 - > > logformat in squid.conf is: > logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st*%>st %st *%<sh %>sh > %rm %ru %un %Sh/%<A:%<a %mt** > > For Https, %>st is supposed to be "Total bytes received from client" and > %st is supposed to be "Total bytes received from client and sent to > client", right? Correct. > But why they have no change while the client send more > data to squid server? Is this a bug? If your Squid does not use SslBump features, then most likely this is a tunneling code bug in Squid. Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users