In Reporter, version 9.x, what does the statistic - Cache Bytes- mean?

Solutions ID:    KB3989
Version:    3.0
Status:    Published
Published date:    08/27/2010
Updated:    08/27/2010

Problem Description

When you run a Full Log Detail Report, or a any User Behavior  report, you can enable columns called "Cache Bytes" and Total bytes.  How are these this statistics calculated.

Which access log fields are used to calculate these statistics in Bluecoat Reporter Reports?

  • Total bytes
  • Cache Bytes
  • Bytes downloaded
  • Bytes uploaded.


All of these statistics employ the access log fields called cs-bytes and sc-bytes. 

The access log field- cs-bytes- declares the bytes transmitted from the Client to the Secure Gateway (SG), which is the statistic Bytes uploaded.  The access log field- sc-bytes- declares the bytes transmitted from the  SG to the Client, which is the statistic Bytes downloaded. Total Bytes is simply the two fields added together for any one user/client IP pair.

The Cache Bytes statistic employs one more field in the access log to determine if the bytes received was cached or not; the s-action field.  If this field contains the text "hit" anywhere, such as TCP_HIT, the bytes downloaded for any user/client IP pair will be added up, as each row in the access log is processed, and declared as "Cache Bytes".  The Cache bytes statistic  can be used to compare the relative gains made, because of Cached data, on each user/client ip pair.

 NOTE1: For complete list of what fields are expected in the SG access log , see FAQ282


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.

Your response will be used to improve our document content.

Ask a Question