On 11/08/2017 04:38 PM, Jeffrey Dunham wrote: > logformat squid %ts.%03tu %6tr %>a %>A %Ss/%03>Hs %<st %>st %rm %ru %un > %Sh/%<A %mt > > And my logs for a 200MB upload look like (this is broken into a > multipart upload): > > 1510181731.211 53953 <ip> <vpn> TCP_TUNNEL/200 3521 41 CONNECT s3.amazonaws.com:443... > 1510181731.991 54721 <ip> <vpn> TCP_TUNNEL/200 3865 41 CONNECT s3.amazonaws.com:443... > 1510181733.884 56646 <ip> <vpn> TCP_TUNNEL/200 3865 41 CONNECT s3.amazonaws.com:443... > 1510181737.049 59783 <ip> <vpn> TCP_TUNNEL/200 4209 41 CONNECT s3.amazonaws.com:443... > 1510181737.794 61246 <ip> <vpn> TCP_TUNNEL/200 5592 41 CONNECT s3.amazonaws.com:443... Sounds like the recently fix bug #4653 (%st lies about tunneled traffic volumes): https://bugs.squid-cache.org/show_bug.cgi?id=4653 Alex. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
