On 08/09/2017 02:21 AM, Ralf Hildebrandt wrote: > I found that some portion is caused by "ldirectord" probing if the > proxy service on port 8080 is still active & working. "active" -- maybe, but "working" -- hardly. To probe that the proxy service is "working" one should send that service at least one HTTP request and, bugs notwithstanding, these connections had no requests. > I'll try making some packet dumps. For the record, if there are no related Squid bugs, then these packet dumps should not have much more information than a properly configured access.log because there is no payload on these connections. Collecting packets _is_ useful to confirm that Squid classifies these connections correctly, but such collection should not be needed long-term. Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users