How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?How to dump entire HTTP requests with apacheUbuntu 9.10 and Squid 2.7 Transparent Proxy TCP_DENIEDRedirected traffic with iptables to squid not displaying custom error page?Proxy-Connection Header associated with failed connectionsStatic file with HTTP headers?Adding an HTTP request header with SquidIs my webserver allowing pre-fetching?Human readable format for http headers with tcpdumpSquid Proxy: ACL error on request by curlHow to log outgoing HTTP requests (including headers) from an Apache reverse proxy

What are the slash markings on Gatwick's 08R/26L?

How to properly maintain eye contact with people that have distinctive facial features?

Creating Fictional Slavic Place Names

How do I subvert the tropes of a train heist?

What's the most polite way to tell a manager "shut up and let me work"?

Why were the Night's Watch required to be celibate?

chmod would set file permission to 000 no matter what permission i try to set

What is game ban VS VAC ban in steam?

Self-Preservation: How to DM NPCs that Love Living?

Geometry affects line breaking

Where did the “vikings wear helmets with horn” stereotype come from and why?

Is there a rule that prohibits us from using 2 possessives in a row?

How did early x86 BIOS programmers manage to program full blown TUIs given very few bytes of ROM/EPROM?

Infinitely many hats

Why don't I have ground wiring on any of my outlets?

How to prevent bad sectors?

Team member doesn't give me the minimum time to complete a talk

Understanding STM32 datasheet regarding decoupling capacitors

If Sweden was to magically float away, at what altitude would it be visible from the southern hemisphere?

Uncommanded roll at high speed

My player wants to cast multiple charges of magic missile from a wand

Is this light switch installation safe and legal?

Differences between “pas vrai ?”, “c’est ça ?”, “hein ?”, and “n’est-ce pas ?”

What was this black-and-white film set in the Arctic or Antarctic where the monster/alien gets fried in the end?



How to log effective outgoing HTTP requests made by Squid, with headers after adaptation?


How to dump entire HTTP requests with apacheUbuntu 9.10 and Squid 2.7 Transparent Proxy TCP_DENIEDRedirected traffic with iptables to squid not displaying custom error page?Proxy-Connection Header associated with failed connectionsStatic file with HTTP headers?Adding an HTTP request header with SquidIs my webserver allowing pre-fetching?Human readable format for http headers with tcpdumpSquid Proxy: ACL error on request by curlHow to log outgoing HTTP requests (including headers) from an Apache reverse proxy






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








4















I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help










share|improve this question






















  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45

















4















I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help










share|improve this question






















  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45













4












4








4


1






I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help










share|improve this question














I use Squid to modify some HTTP headers sent by clients. For testing purposes, I want to completely delete the 'User-Agent' header.



Here is my config :



request_header_access User-Agent deny all
header_replace User-Agent Timmy
logformat mylogformat %>a [%%H:%Mtl] "%rm %ru HTTP/%rv" %>Hs "Accept:%Accept>ha User-Agent:%User-Agent>ha" %Ss:%Sh


I use the syntax '>ha' to log "The HTTP request headers after adaptation and redirection", as it is said here http://www.squid-cache.org/Versions/v3/3.1/cfgman/logformat.html



Unfortunately, according to my logfile access.log, the header is not modified :



x.x.x.x [19:18] "GET http://example.org/favicon.ico HTTP/1.1" 404 "Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 User-Agent:Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2" TCP_MISS:DIRECT` 


However, when requests are made to my Nginx server through the proxy, Nginx effectively logs correctly this header :



[06/Mar/2012:19:18:07 +0100] "GET /sites/all/modules/colorbox/styles/default/images/controls.png HTTP/1.1" 200 2104 "http://example.org/sites/default/files/css/css_zpYGaC6A9wUNMpW3IPg55mz-mMAjvhuo-SZTcX-lqFQ.css" "Timmy"


What is the right syntax to log correctly modified HTTP headers, urls rewritten, etc on squid log files ?



My squid version is 2.7.STABLE9 and it runs on a Debian SQueeze 64bits.



Thanks for your help







http squid http-headers






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Mar 6 '12 at 18:45









mishkamishka

944




944












  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45

















  • Did you ever figure this out? I have the same issue with squid 3.1 =/

    – Dirk
    Dec 5 '13 at 2:45
















Did you ever figure this out? I have the same issue with squid 3.1 =/

– Dirk
Dec 5 '13 at 2:45





Did you ever figure this out? I have the same issue with squid 3.1 =/

– Dirk
Dec 5 '13 at 2:45










1 Answer
1






active

oldest

votes


















0














"adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






share|improve this answer























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f366947%2fhow-to-log-effective-outgoing-http-requests-made-by-squid-with-headers-after-ad%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



    Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






    share|improve this answer



























      0














      "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



      Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






      share|improve this answer

























        0












        0








        0







        "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



        Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.






        share|improve this answer













        "adaptation" in the Squid documentation refers to ICAP and eCAP adaptation, which is not part of Squid-2.



        Header mangling done by *_header_access and header_replace was done directly on the wire-format mime headers as they are sent by the old Squid versions. Current Squid-3 do it differently, though I'm not sure if the new way will affect the log results any better.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Sep 28 '16 at 6:15









        Amos JeffriesAmos Jeffries

        24015




        24015



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f366947%2fhow-to-log-effective-outgoing-http-requests-made-by-squid-with-headers-after-ad%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

            Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

            What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company