squid日志格式参数详解

在squid设置有日志格式设置

logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt

参数解释如下

Field name syntax keys:

     {} modifier or argument. Also used to specify header names

     >  request (client)  客户请求

     <  reply (server)    服务端回应

     a  address           访问用户ip地址

     A  address name  访问用户电脑名称

     h  all headers       浏览器头信息

     i  ident                

     p  port                 端口

     r  request line (no query)

     t  time   访问时间

     u  user

     l  local address/port (where request was accepted)

%>a

Client source IP address

%>A

Client FQDN

%>p

Client source port

%<a

Server or peer IP address

%<p

Server or peer port number

%<A

Server IP address or peer name

%la

Local IP address where the request was accepted

%lp

Local port where the request was accepted

%lA

Local port name where the request was accepted

%ts

Date of request, seconds since epoch

%{format}tl

Date of request, strftime format (localtime)

%{format}tg

Date of request, strftime format (gmt)

%tu

Date of request, sub-second component

%tr

Time to serve the request, in milliseconds

%{header}>h

Request header

%{header:element}>h

Named request header field element (list headers)

%{header:separator element}>h

Named request header field element, using "separator" as field separator (it can be any non-alphanumeric single character)

%>h

All request header

%{header}<h

Request headers, as for <..h above

%un

Authenticated user name or dash

%ur

Authenticated user realm or dash

%us

Authenticated user scheme or dash

%ui

Ident user name

%Hs

HTTP status code (200, 404, 407, etc)

%Ht

HTTP status text (Not found, etc)

%Ss

Squid status code (TCP_HIT, TCP_MISS etc)

%Se

Squid error code (ERR_DENIED, ERR_...)

%Sh

Squid hierarchy code (FIRST_UP_PARENT, etc)

%mt

MIME type of the request

%rm

Request method

%ru

Request URL, without the query string

%rq

Request query string, including ?

%rp

Request protocol (i.e. HTTP/1.1)

%ps

Peer selection status (DIRECT, PARENT, CD_PARENT_HIT, etc. including the TIMEDOUT_ variant)

%>sl

Size of request line

%>sh

Size of request headers, including request line

%>sH

Size of request headers, excluding request line

%>sb

Size of request body, raw received bytes

%>sB

Size of request body, excluding transfer encoding

%>st

Total size of request

%<sl

Size of reply status line

%<sh

Size of reply headers, including status line

%<sH

Size of reply headers, excluding status line

%<sb

Size of reply body, raw transmitted bytes

%<sB

Size of reply body, excluding transfer encoding

%<st

Total size of reply

%%

A literal %

不记图片类访问日志设置
acl nolog urlpath_regex //.gif //.jpg //.css //.js //.swf
access_log /data/squid/var/logs/access.log common !nolog