Squid log format
From Wikitech
$hostname %sn %ts.%03tu %tr %>a %Ss/%03Hs %<st %rm %ru %Sh/%<A %mt %{Referer}>h %{X-Forwarded-For}>h %{User-Agent}>h
Field indexes when space-separated:
- Hostname of the squid
- Sequence number
- Seconds (and milliseconds) since epoch
- Request service time in ms
- Client IP
- Squid request status, HTTP status code
- Reply size including HTTP headers
- Request method (GET/POST etc)
- URL
- Squid hierarchy status, peer IP
- MIME content type
- Referer header
- X-Forwarded-For header
- User-Agent header
Sample line, with the client IP address replaced with 1.2.3.4 to protect the innocent:
sq18.wikimedia.org 1715898 1169499304.066 0 1.2.3.4 TCP_MEM_HIT/200 13208 GET http://en.wikipedia.org/wiki/Main_Page NONE/- text/html - - Mozilla/4.0%20(compatible;%20MSIE%206.0;%20Windows%20NT%205.1;%20.NET%20CLR%201.1.4322)
