RE: [squid-users] Question about Logs.

 
> Hi all,
> Anybody knows why an one ip writes in the logs many times.?
>
Because it writes to the log once and only once per requested object.

> 1049921005.087 305 199.42.77.164 TCP_MISS/200 49 CONNECT
> login.oscar.aol.com:443 xzq82q DIRECT/64.12.161.185 -
> 1049921005.514 306 199.42.77.164 TCP_MISS/200 49 CONNECT
> login.oscar.aol.com:443 xzq82q DIRECT/64.12.161.153 -
> 1049921005.942 304 199.42.77.164 TCP_MISS/200 49 CONNECT
> login.oscar.aol.com:443 xzq82q DIRECT/64.12.161.185 -
> 1049921006.544 482 199.42.77.164 TCP_MISS/200 49 CONNECT
> login.oscar.aol.com:443 xzq82q DIRECT/64.12.161.153 -
> 1049921006.973 305 199.42.77.164 TCP_MISS/200 49 CONNECT
> login.oscar.aol.com:443 xzq82q DIRECT/64.12.161.185 -
> 1049921007.400 305 199.42.77.164 TCP_MISS/200 49 CONNECT
> login.oscar.aol.com:443 xzq82q DIRECT/64.12.161.153 -
>
> There are any way to do that an ip writes in the logs only one time at
> connect and no more. This happens with aol´s servers, if
> users join aol by
> HTTP too.

Then the request was sent from the browser (and a reply of 49 bytes received) every ~500ms six times. The reply took about 300-400ms. Squid is just telling it like it is, I'm afraid.

BTW, CONNECT is an HTTP method, nothing really to do with "making a connection". It is the method that passes SSL requests and replies between a browser and a remote server.

Michael Lightfoot
Unix Consultant
ISG Host Systems
Comcare
+61 2 62750680
Apologies for the rubbish that follows...
------------------------------------------------------------------------
NOTICE: This e-mail message and attachments may contain confidential
information. If you are not the intended recipient you should not use or
disclose any information in the message or attachments. If received in
error, please notify the sender by return email immediately. Comcare
does not waive any confidentiality or privilege.
Received on Wed Apr 09 2003 - 22:36:24 MDT