3Com SUPERSTACK 3 WEBCACHE 3000, User Manual

Page: 326 / 362

326 A
PPENDIX
H: L
OG
F
ORMATS
The Webcache supports WELF, the WebTrends Enhanced Log Format,
so that you can analyze the Webcache Access Log files with
WebTrends reporting tools.
3Com recommends that you select the Webtrends Extended Log Format
(WELF) option and use Webtrends Log Analyzer or WebTrends Firewall
Suite to analyze the access logs that the Webcache produces:
http://www.webtrends.com
(correct at time of publication)
For further information about configuring access logging, see “Access
Logging” on page 140 .
Squid Log Format Table 16 lists the Squid logging fields.
The format of Squid log file entries is:
time elapsed client action/code size method url ident
hierarchy/from content
Table 16 Squid logging fields
Squid Meaning
time The client request timestamp; date and time of the client
request, in seconds since January 1,1970.
elapsed The transfer time; total transfer time in milliseconds.
client The client host IP; the IP address of the client’s host machine.
action/code The cache result code; specifies how the cache responded to
the request (HIT, MISS, ...).
The proxy response status code; the HTTP response status
code from proxy to client.
size The proxy response transfer length (includes header and
content length).
method The client request HTTP method; method (GET, POST,...)
from client to proxy.
url The client request canonical URL; blanks and other characters
that might not be parsed by log analysis tools are replaced by
escape sequences. The escape sequence is the ASCII code
number.
ident The client authenticated user name; result of the
RFC931/ident lookup of the client user name.
(continued)
dua1611-5aaa04.book Page 326 Friday, November 29, 2002 8:56 PM