How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?How to dump entire HTTP requests with apacheUbuntu 9.10 and Squid 2.7 Transparent Proxy TCP_DENIEDRedirected traffic with iptables to squid not displaying custom error page?Proxy-Connection Header associated with failed connectionsStatic file with HTTP headers?Adding an HTTP request header with SquidIs my webserver allowing pre-fetching?Human readable format for http headers with tcpdumpSquid Proxy: ACL error on request by curlHow to log outgoing HTTP requests (including headers) from an Apache reverse proxy

What are the slash markings on Gatwick's 08R/26L?

How to properly maintain eye contact with people that have distinctive facial features?

Creating Fictional Slavic Place Names

How do I subvert the tropes of a train heist?

What's the most polite way to tell a manager "shut up and let me work"?

Why were the Night's Watch required to be celibate?

chmod would set file permission to 000 no matter what permission i try to set

What is game ban VS VAC ban in steam?

Self-Preservation: How to DM NPCs that Love Living?

Geometry affects line breaking

Where did the “vikings wear helmets with horn” stereotype come from and why?

Is there a rule that prohibits us from using 2 possessives in a row?

How did early x86 BIOS programmers manage to program full blown TUIs given very few bytes of ROM/EPROM?

Infinitely many hats

Why don't I have ground wiring on any of my outlets?

How to prevent bad sectors?

Team member doesn't give me the minimum time to complete a talk

Understanding STM32 datasheet regarding decoupling capacitors

If Sweden was to magically float away, at what altitude would it be visible from the southern hemisphere?

Uncommanded roll at high speed

My player wants to cast multiple charges of magic missile from a wand

Is this light switch installation safe and legal?

Differences between “pas vrai ?”, “c’est ça ?”, “hein ?”, and “n’est-ce pas ?”

What was this black-and-white film set in the Arctic or Antarctic where the monster/alien gets fried in the end?



How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?


How to dump entire HTTP requests with apacheUbuntu 9.10 and Squid 2.7 Transparent Proxy TCP_DENIEDRedirected traffic with iptables to squid not displaying custom error page?Proxy-Connection Header associated with failed connectionsStatic file with HTTP headers?Adding an HTTP request header with SquidIs my webserver allowing pre-fetching?Human readable format for http headers with tcpdumpSquid Proxy: ACL error on request by curlHow to log outgoing HTTP requests (including headers) from an Apache reverse proxy






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








4















I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help










share|improve this question






















  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45

















4















I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help










share|improve this question






















  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45













4












4








4


1






I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help










share|improve this question














I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help







http squid http-headers






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Mar 6 '12 at 18:45









mishkamishka

944




944












  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45

















  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45
















Did you ever figure this out? I have the same issue with squid 3.1 =/

– Dirk
Dec 5 '13 at 2:45





Did you ever figure this out? I have the same issue with squid 3.1 =/

– Dirk
Dec 5 '13 at 2:45










1 Answer
1






active

oldest

votes


















0














"adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






share|improve this answer























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f366947%2fhow-to-log-effective-outgoing-http-requests-made-by-squid-with-headers-after-ad%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



    Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






    share|improve this answer



























      0














      "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



      Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






      share|improve this answer

























        0












        0








        0







        "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



        Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






        share|improve this answer













        "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



        Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Sep 28 '16 at 6:15









        Amos JeffriesAmos Jeffries

        24015




        24015



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f366947%2fhow-to-log-effective-outgoing-http-requests-made-by-squid-with-headers-after-ad%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

            Vilaño, A Laracha Índice Patrimonio | Lugares e parroquias | Véxase tamén | Menú de navegación43°14′52″N 8°36′03″O / 43.24775, -8.60070

            Cegueira Índice Epidemioloxía | Deficiencia visual | Tipos de cegueira | Principais causas de cegueira | Tratamento | Técnicas de adaptación e axudas | Vida dos cegos | Primeiros auxilios | Crenzas respecto das persoas cegas | Crenzas das persoas cegas | O neno deficiente visual | Aspectos psicolóxicos da cegueira | Notas | Véxase tamén | Menú de navegación54.054.154.436928256blindnessDicionario da Real Academia GalegaPortal das Palabras"International Standards: Visual Standards — Aspects and Ranges of Vision Loss with Emphasis on Population Surveys.""Visual impairment and blindness""Presentan un plan para previr a cegueira"o orixinalACCDV Associació Catalana de Cecs i Disminuïts Visuals - PMFTrachoma"Effect of gene therapy on visual function in Leber's congenital amaurosis"1844137110.1056/NEJMoa0802268Cans guía - os mellores amigos dos cegosArquivadoEscola de cans guía para cegos en Mortágua, PortugalArquivado"Tecnología para ciegos y deficientes visuales. Recopilación de recursos gratuitos en la Red""Colorino""‘COL.diesis’, escuchar los sonidos del color""COL.diesis: Transforming Colour into Melody and Implementing the Result in a Colour Sensor Device"o orixinal"Sistema de desarrollo de sinestesia color-sonido para invidentes utilizando un protocolo de audio""Enseñanza táctil - geometría y color. Juegos didácticos para niños ciegos y videntes""Sistema Constanz"L'ocupació laboral dels cecs a l'Estat espanyol està pràcticament equiparada a la de les persones amb visió, entrevista amb Pedro ZuritaONCE (Organización Nacional de Cegos de España)Prevención da cegueiraDescrición de deficiencias visuais (Disc@pnet)Braillín, un boneco atractivo para calquera neno, con ou sen discapacidade, que permite familiarizarse co sistema de escritura e lectura brailleAxudas Técnicas36838ID00897494007150-90057129528256DOID:1432HP:0000618D001766C10.597.751.941.162C97109C0155020