Re: Referer logs, and a httpd logging bug?

  I'm getting close to a patch, but not quite. Is there some function to
unpack a packed header? The accessLogLog has access to al->header.request,
which is a Packed request header.
The closest thing I can fund to do yet is

htcpUnpackCountstr(al->headers.request, strlen(al->headers.request),
&request);

  although the 3rd param is supposed to be a **char. Not sure how I'd
unpack to a **char and get a HttpRequest struct from that.

  Any advice apprecicated. If it isn't possible to unpack the header,
perhaps I should pass along the unpacked header to the logging functions?

-Jonathan

*********** REPLY SEPARATOR ***********

On 8/20/99 at 2:12 AM tom minchin wrote:

>On Thu, Aug 19, 1999 at 10:58:41AM -0400, Jonathan Roy wrote:
>>
>> Is there any patch of any sort to let me log referer info? We use
Squid
>> since our web server is kinda slow, and had a 10x traffic increase to an
>> area last night, but without the referer data we have no idea where it
is
>> coming from! Quite annoying. If Squid could log to Apache's "extended
>> logging format", which is standardized and supported by a log of log
>> processing programs, that'd be excellent.
>>
>> Also, in the normal httpd access.log files, the GET parameters sent to
a
>> cgi aren't logged. ie: The url will be like "file.cgi?" instead of
>> "file.cgi?area=1". Apache records all of the GET variables passed, so it
>> seems like Squid acting differently isn't right...
>>
>
>There may be a patch for logging referer. As for GET arguments, they've
been
>hidden for privacy reasons by default, but in your squid conf:
>
># TAG: strip_query_terms
># By default, Squid strips query terms from requested URLs before
># logging. This protects your user's privacy.
>strip_query_terms off
>
>You can log in vanilla "HTTP" format if you really want, again in your
>squid.conf:
>
># TAG: emulate_httpd_log on|off
># The Cache can emulate the log file format which many 'httpd'
># programs use. To disable/enable this emulation, set
># emulate_httpd_log to 'off' or 'on'. The default
># is to use the native log format since it includes useful
># information that Squid-specific log analysers use.
>#
>emulate_httpd_log on
>
>tom@interact.net.au

---
Jonathan Roy - roy@idle.com - Idle Communications, Inc.