Re: [squid-users] Fwd: Howto Measure bandwidth consumption of HTTPS traffic?

M Admin wrote:
> Hello everyone --
>
> I am currently proxying all traffic from the client through SQUID. I
> am trying to measure the amount of bandwidth used by the client. The
> client is connecting to Gmail.com via HTTPS.
>
> I see the connections to Gmail in the access.log as such:
>
> 1239680667.335 216115 172.19.240.27 TCP_MISS/200 2964 CONNECT
> mail.google.com:443 - DIRECT/74.125.155.18 -
>
> but it doesnt seem like all client requests show up in the log. I am
> running Firebug 1.3.1 in the client and I see many GET and POST
> requests from the client to Google that don't show up in the
> access.log.
>
> Can I use SQUID for this function? Ie measure bandwidth for HTTPS
> traffic for 1 and eventually multiple users? Is it accurate?
>

Default squid log formats are currently NOT accurate to the byte for
accounting.

For byte-accurate accounting you need to use the format:
   logformat altsquid %ts.%03tu %6tr %>a %Ss/%03Hs %st %rm %ru %un
%Sh/%<A %mt

or for common log format:
   logformat althttpd %>a %ui %un [%tg] "%rm %ru %rv" %Hs %st
%Ss:%Sh:%<A "%{Referer}>h" "%{User-Agent}>h"

(NP: the above are meant to be single long lines, watch the whitespace
wrap).

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14
   Current Beta Squid 3.1.0.7