Re: CLF and ELF logs (REPETITION)

I have the following question. This is a repost of what I sent directly to
Mark Kennedy who wrote the squid section of code I am concerned with. But
after a month I haven't heard a response on it. I'm basically needing to
get referrer and agent information to be present in the SQUID logs so that
I can do more accurate log analysis for where people are coming from.

Helpful information would be appreciated to the utmost.

James.
----------------------------
Sorry to have to bother you again on this question and I really appreciated
your taking the time to answer originally. I'm finally in a position to
recompile and at the same time I was going to take squid 1.1.20 to 1.1.22
as I am not yet ready to upgrade that Server from FreeBSD 2.2.6 to FreeBSD
3.1R whic I believe I need to do to go to squid 2.

I have one question really. When I issue the following after an initial
make of squid which gets the work directory created. I then issue...

./configure --prefix=/squid --enable-useragent-log=yes
--enable-log-full-headers=yes --enable-dlmalloc=LIB

followed by

make install

But I get no real confirmation that this has taken hold other than in
config.status. In fact I insert something silly like
--enable-checkthis=yes and everythin still appears to compile without
warnings. Are the above
the "correct" compiler tags? Frankly, I'm just scared of crapping out the
smoothly running 1.1.20 but I need those agent and referrer data elements.
Plus I wasn't sure if 1.1.20 to 1.1.22 required me to purge the cache
directory or not.

>> Does anyone know of a way to get SQUID to record ELF style logs?
>> I specifically need to be able to record "http-referrer" information
>> so that I can run a www statistics package. But I can't seem to
>> pin down how to get SQUID to start saving that information.
>>
>> Is it tied to any of the following? Or am I hoping in vane?
>>
>> #emulate_httpd_log on
>> #log_mime_hdrs off
>> #LOG_FULL_HEADERS
>> #useragent_log none
>
>if you compile squid with LOG_FULL_HEADERS defined (i'm assuming you're
>a programmer and know how to do this) and if you specify 'log_mime_hdrs on'
>in your squid config file, then two (fat) tokens will be appended to the
end of
>each record in your squid access log - one for the request headers and one
for the response
>headers. they are URL-encoded but ascii SPACE is left intact so you can
>read them. the tokens are delimited with '[' and ']' so you can easily
parse them.
>they certainly contain the 'referrer' field. if you're a perl programmer
too, you can
>easily use perl and the URI::Escape module to break out these tokens, convert
>them to their original form, and then do something with them.
>
>/mark kennedy (i wrote the log_mime_hdrs code)
Received on Thu Apr 22 1999 - 23:44:52 MDT