On 16/11/2011 10:59 p.m., Paolo Supino wrote:
> Hi
>
>    in the case of  TCP_MISS/400 does the 400 refer to the HTTP error
> code returned from the web server?
>
It is the status code sent to the client. There could be multiple server 
status codes encounterd during the processing. If the hierarchy details 
field later on the line contains a server IP/name it is likely to be 
relayed from that server. Although that is no guarantee either, squid 
could be returning a stale 400 response after a 5xx result from the server.
PS. this is access.log.
   
http://wiki.squid-cache.org/Features/LogFormat#Squid_native_access.log_format_in_detail
   http://wiki.squid-cache.org/SquidFaq/SquidLogs#access.log
Amos
Received on Wed Nov 16 2011 - 10:23:50 MST
This archive was generated by hypermail 2.2.0 : Wed Nov 16 2011 - 12:00:03 MST