# $Id: .jrc,v 1.1 1998/06/15 04:20:04 elkner Exp $ # all whitespaces ([\t\n\r]+) at the beginning of a line are ignored # everything after a word ([^\t\n\r]+) is ignored # comments (everything which starts with a '#') are ignored # line breaks with '\' at the end of a line are not allowed # a keyword is a word with a colon (':') at its end # # SUPPORTED KEYWORDS ARE: # # "logtypes:" "files:" "exclude-clients:" "exclude-protos:" # # "exclude-protos:" has a higher priority than "exclude-clients:" # i.e. if you specify "do NOT exclude client X, exclude protocol Y" # then if client X made a request via protocol Y, the access.log line # is ignored ########################################################################### # keyword: "files" # # specify the output file names and output type for the statistics you want # # format: Filename=Type # # Filename name of the file, where the output will be stored # Type Format-StatType-Presentation-Entries # # Format: t|h text or html (when html is used, all columns with # overall hits == 0 are not printed) # StatType: t|s|C|S|e|p # t ... TopLevelDomains (TLDs) # s ... SecondLevelDomains(SLDs) # C ... ContentType (CT) # S ... ContentSubType (CST) # e ... case-insensitive URL extensions (EXT) # (if somebody needs them case-sensitve as well, # please let me know) # p ... Protocols (i.e. http, ftp, etc. ) # Presentation p|n Output in % or numeric # Entries: N|0 print top N entries or all (0) # # NOTE: Squid logs VERY SELDOM the content type when responding # to an ICP_QUERY. Instead it logs a "-", which is the same as # no content type was provided from the original server - # so keep that in mind, when doing your stats files: #------------- stats/tld.txt=t-t-n-0 # Text file for TLDs, all entries as numbers stats/tld.html=h-t-p-15 # HTML file for TLDs, top 15 entries in percent stats/sld.txt=t-s-n-0 # Text file for SLDs, all entries as numbers stats/sld.html=h-s-p-30 # HTML file for SLDs, top 30 entries in percent stats/ct.txt=t-C-n-0 # Text file for CTs, all entries as numbers stats/ct.html=h-C-p-15 # HTML file for CTs, top 15 entries in percent stats/cst.txt=t-S-n-0 # Text file for CSTs, all entries as numbers stats/cst.html=h-S-p-30 # HTML file for CSTs, top 30 entries in percent stats/x.txt=t-e-n-0 # Text file for Extensions, all entries as numbers stats/x.html=h-e-p-30 # HTML file for Extensions, top 30 entries in percent stats/p.txt=t-p-n-0 # Text file for Protocols, all entries as numbers stats/p.html=h-p-p-5 # HTML file for Protocols, top 5 entries in percent ############################################################################# # keyword: "exclude-clients" # # in this section you can specify IP patterns from clients, you do not # want to include in the stats (i.e. appropriate lines in the access.log # file are ignored). # All IP addresses MUST appear in the following CDIR notation (referred as # IP pattern): # a.b.c.d/m with a, b, c, d ... {0..255} and m ... {0..32} # # you can prefix any IP pattern with a '!`, which explicitly says, # "Do not exclude the access.log line for this client" # # Jesalfa uses here a linear list, so order of the entries are important!!! exclude-clients: #------------------- #!141.44.25.22/32 #141.44.0.0/16 ############################################################################# # keyword: "exclude-protos:" # # skip all access.log lines, where the URI contains one of the specified # protocols exclude-protos: #------------------- cache_object #gopher #wais ############################################################################# # keyword: "logtypes" (see squid source icp.c log_tags[]) # # you can merge several logtypes into one class # each logtype is only allowed once and within one class # a class starts with the word '{' # a class ends with the word '}' # a word (logtype), which is not a part of a class formed with '{ ... }' # represents a class by itself # nested classes are not allowed # # ACCOUNTING RULES #--------------------------------------------------------------------------- # all lines containing ERR_DNS_FAIL or which have not a valid TopLevelDomain # (TLD) in the host address of the URL are counted to ???.??? # Valid TLDs are obtained from the country-codes file. # # all lines containing an URL which consists of an IP instead of a symbolic # address, are counted to TLD "IP" and SLD "IP" # # all logtypes, discovered in the access.log, which are not part of any class # you defined, are combined to a special class named 'NONE' logtypes: #----------------- NONE # TCP HITS classes TCP_IMS_HIT { TCP_HIT TCP_REFRESH_HIT } # TCP MISSES classes TCP_CLIENT_REFRESH { TCP_MISS TCP_REF_FAIL_HIT TCP_REFRESH_MISS TCP_IMS_MISS TCP_SWAPFAIL TCP_DENIED } # UDP HITS classes UDP_HIT UDP_HIT_OBJ # UDP MISSES classes { UDP_MISS UDP_DENIED UDP_INVALID UDP_MISS_NOFETCH } # ERRORS classes { ERR_READ_TIMEOUT ERR_LIFETIME_EXP ERR_NO_CLIENTS ERR_READ_ERROR ERR_CLIENT_ABORT ERR_CONNECT_FAIL ERR_INVALID_REQ ERR_UNSUP_REQ ERR_INVALID_URL ERR_NO_FDS ERR_DNS_FAIL ERR_NOT_IMPLEMENTED ERR_CANNOT_FETCH ERR_NO_RELAY ERR_DISK_IO ERR_ZERO_SIZE_OBJECT ERR_FTP_DISABLED ERR_PROXY_DENIED } # up to now hiertypes are ignored hiertypes: ######################## 1 NONE 2 DIRECT 3 SIBLING_HIT 4 PARENT_HIT 5 DEFAULT_PARENT 6 SINGLE_PARENT 7 FIRST_UP_PARENT 8 NO_PARENT_DIRECT 9 FIRST_PARENT_MISS 10 CLOSEST_PARENT_MISS 11 CLOSEST_DIRECT 12 LOCAL_IP_DIRECT 13 FIREWALL_IP_DIRECT 14 NO_DIRECT_FAIL 15 SOURCE_FASTEST 16 SIBLING_UDP_HIT_OBJ 17 PARENT_UDP_HIT_OBJ 18 PASSTHROUGH_PARENT 19 SSL_PARENT_MISS 20 ROUNDROBIN_PARENT 21 INVALID CODE