SQUID 2.2-STABLE3 access.log Question

From: James Porter <webmaster@dont-contact.us>
Date: Thu, 30 Sep 1999 02:56:03 -0400

The following marked ITEM 1 is a one line entry from our SQUID log. We
have referrer and agent data turned on. The second marked ITEM 2 is a
typical entry in an Apache 1.3.6 ELF log. My question is this. I have
been trying for some time to write a script that will convert the SQUID log
into a standard ELF log which can then be processed by our regular Web
Server STAT processing scripts. For the most part I've figured out how to
get everything. BUT one CRITICAL factor has jumped out at me. If you
notice in the ITEM 2 "bustyr" represents the authorized logged user in the
protected area of the website. I have been trying to find where the
authorized user data fits in the SQUID log with no success. Is the SQUID
standard access.log file omitting this data? The ITEM 1 line is from a
.HTACCESS protected directory and yet I cannot find a user field. Have I
somehow miscompiled SQUID so the field I am looking for is not present? If
not I hesitate to think I'm the first to ask this.

James.

ITEM 1:
936218785.514 0 216.78.113.58 TCP_MISS/200 2570 GET
http://208.139.254.174/members2/scans/pebbred/pebrdino09-t.jpg - DIRECT/208
.139.254.142 image/jpeg [Referer:
http://www.trenchcoat.com/members2/scans/pebbred/index.html%0d%0aConnection:
 Keep-Alive%0d%0aUser-
Agent: Mozilla/4.61 %5ben%5d (Win95%3b I)%0d%0aHost:
www.trenchcoat.com%0d%0aAccept: image/gif, image/x-xbitmap, image/jpeg,
image/p
jpeg, image/png%0d%0aAccept-Encoding: gzip%0d%0aAccept-Language:
en%0d%0aAccept-Charset: iso-8859-1,*,utf-8%0d%0aAuthorization: Basi
c dGhheHRvbjpob3JuZG9nMQ==%0d%0a] [HTTP/1.1 200 OK%0d%0aDate: Wed, 01 Sep
1999 20:46:25 GMT%0d%0aServer: Apache/1.3.6 (Unix)%0d%0aLa
st-Modified: Tue, 31 Aug 1999 06:12:00 GMT%0d%0aETag:
%221f092-8b2-37cb7230%22%0d%0aAccept-Ranges: bytes%0d%0aContent-Length: 2226%0
d%0aKeep-Alive: timeout=30, max=244%0d%0aConnection:
Keep-Alive%0d%0aContent-Type: image/jpeg%0d%0a%0d]

ITEM 2:

152.163.189.130 - bustyr [30/Sep/1999:02:47:38 -0400] "GET
/members/graphics/4uh-2.gif HTTP/1.0" 200 3689 "http://www.chessiemoorexx
x.com/members/mo/index.htm" "Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0;
Windows 98)"
Received on Thu Sep 30 1999 - 01:11:41 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:48:36 MST