Re: [squid-users] Content-Type log erro

Romulo Boschetti wrote:
> Hi Amos,
>
> I removing the "logformat" line from my config file
>
> acl video rep_mime_type -i ^video/*$
> http_reply_access deny video
> access_log /opt/hsc/webcontrol/log/access.log
>
> But my problem persist. When I access one youtube video the Mime-type in the log is incorrect. This only happens when a the access is Denied.
>

Oh. gotcha. Right.

What you see is because what gets logged is the mime type of the content
actually sent to the client as a reply.

In this case a text HTML error page was sent back. There is no video
involved beyond the URL.

> My Log Denied:
> 1274444734.862 35 192.168.1.102 TCP_DENIED/403 1891 GET http://s.ytimg.com/yt/swf/watch-vfl165272.swf paulo DIRECT/201.47.0.52 text/html
>
> My Log Accept:
> 1274445021.663 12066 192.168.1.102 TCP_MISS/200 148805 GET http://s.ytimg.com/yt/swf/ad-vfl165210.swf paulo DIRECT/201.47.0.52 application/x-shockwave-flash
>
> That Way I can not see when anybody try access any content prohibited.
>

You will have to do something to look at the denials and their URL if
you want to see what has been successfully denied. There is no reliable
way without having received the content already to know what it was.

>
> ----- Mensagem original -----
> De: "Amos Jeffries"
>
> Romulo Boschetti wrote:
>> Hi,
>>
>> The content-type field in the access.log is always "-" character.
>>
>> The only time I saw "text/html" is when your request is deny.
>>
>> Linux CentOs 5.4
>> Squid Cache: Version 2.7.STABLE5
>>
>> some squid.conf parameters:
>>
>> emulate_httpd_log off
>> acl video rep_mime_type -i ^video/*$
>> http_reply_access deny video
>> logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
>> access_log /var/log/squid/access.log
>>
>> I tried several configuration and I always get the same result.
>>
>> I have found the Bug http://bugs.squid-cache.org/show_bug.cgi?id=2298 , but i dont have find more
>> information about resolution of this Bug. And I dont have found any information about solution in the
>> version squid-2.7.STABLE5+ .
>>
>> Thanks
>
>
> Re-defining the "squid" format is not a good idea.
> Try removing the "logformat" line from your config file, leaving
> everything else untouched.
>
> Please report back even if that fixes it. I suspect you have found a bug
> in the custom format handling.
>
>
> Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.3