Re: [squid-users] Re: Squid log details - HTTPS tunnel detection

ons 2007-05-23 klockan 19:25 +0100 skrev Markus Moeller:

> >Squid only keeps a single total counter for CONNECT requests. To get
> >them split you need to extend the code to keep two counters.
>
> Do you have a pointer where in the code I have to look for it ?

There is a couple of different places..

The CONNECT traffic is all processed in ssl.c. The counter is updated in
sslWriteClient & sslWriteServer.

                *sslState->size_ptr += len;

This size_ptr is given to ssl.c as part of the sslStart() call from
client_side.c.

Finally client_size.c also hands the counters down to the access logging
code in the call to accessLogLog().

Regards
Henrik