Re: [squid-users] content logging

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 13 Apr 2011 21:48:44 +1200

On 13/04/11 21:11, Klaus Darilion wrote:
> Hi!
>
> For debugging of certain http clients I need to log the whole HTTP(S)
> traffic passed through squid, i.e. complete HTTP request and the HTTP
> response (all headers and bodies).
>
> I read lots on the wiki and it seems like SslBump and DynamicSslCert
> will help to break the SSL connection. But I did not found a feature in
> Squid to log the content to a file. Is there such a feature in Squid?
>
> If not, I guess I could use ICAP to forward the content to an ICAP
> server. Does anybody know an ICAP server which just dumps the whole
> content to disk?
>
> Thanks
> Klaus

Squid is designed not to do anything with the content but pass it on as
fast as possible. So that is a no to your first question.

As for the second, I've not heard of an ICAP server. But you want to
look at the eCAP help areas for more details. There are people doing it
or similar with eCAP.

The easier way though is with a pcap/tcpdump packet dump.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.12
   Beta testers wanted for 3.2.0.6
Received on Wed Apr 13 2011 - 09:48:51 MDT

This archive was generated by hypermail 2.2.0 : Wed Apr 13 2011 - 12:00:03 MDT