On 7/05/20 4:11 am, Ahmad Alzaeem wrote: > Hello Floks , > > > We have squid 4.x > > We need to debug the user agents being sent from our local network . > > We added : > logformat useragent %>a [%tl] "%{User-Agent}>h" > access_log stdio:/var/log/squid/${service_name}-useragent.log useragent > The only thing wrong with that config is that the "useragent" is a built-in logformat name. Do not re-define it. If you want any differences to the built-in, use a different name for your custom format. > > But out logs only logs as below : > > > 12.14.49.200 [06/May/2020:12:09:56 -0400] "-" ... > > It seems to be “-“ , Not the useragent we suppose to see . > What makes you think those transactions have User-Agent headers? The '-' means no such header present. > > How can we let squid debug the incoming user agent and the outgoing user agent what go out to the website ? > You can try this to see what the headers actually contain. logformat ualog %>a [%tl] "%{User-Agent}>h" "%>h" access_log stdio:/var/log/squid/${service_name}-useragent.log ualog If the string with full headers contain 'User-Agent:' when "-" is displayed first there is a bug, otherwise it is just your expectation being incorrect. Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users