Re: [squid-users] How to configure SARG to analysis squid logs ?

From: Amos Jeffries <>
Date: Fri, 16 Nov 2012 14:08:39 +1300

On 16/11/2012 11:38 a.m., Soporte Técnico wrote:
> There´s any way to configure SARG to list topsites downloaded VIA DIRECT
> ONLY and not via parents?
> I need to know the sites that more use the DIRECT connection of my squid.
> Jorge.

?? you are very unlikely to see any sites that ONLY go via direct,
unless you configured it to happen for some sites. The parent proxy
going down has rarely ever anything to do with the URL being requested
and the URL which can kill a parent are always seen to go there *as
well* as DIRECT - same for the requests going to an overloaded parent.

I would grep the access.log into another file using a pattern that
scanned for " DIRECT/", then process that other file for commonly seen
URLs. Maybe also for ORIGINAL_DST, which is a new variant of DIRECT

I can't speak about SARG coniguration since I don't use that third-party
tool. maybe someone else will chiime in, or you could go to the SARG
project for help.

Received on Fri Nov 16 2012 - 01:08:53 MST

This archive was generated by hypermail 2.2.0 : Fri Nov 16 2012 - 12:00:05 MST