The idea is to select edit and submit calls that are relevant to the usability project and track edit/save ratio of filtered calls over time. Bots will be filtered, "action=edit&redlink=1,.." will be discarded (as 95% inadvertent edit calls), and some more. I would appreciate help in decoding most occurring squid/html statuses: Here are the relevant html codes from FAQ: http://wiki.squid-cache.org/SquidFaq/SquidLogs Also http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html 000 Used mostly with UDP traffic. 200 OK 206 Partial Content 301 Moved Permanently 302 Moved Temporarily 400 Bad Request 403 Forbidden 404 Not Found [417 Expectation Failed] 500 Internal Server Error 502 Bad Gateway 503 Service Unavailable 504 Gateway Timeout The following are frequencies in which the index.php result codes are found in the 1:1000 sampled squid logs from just over 6 months: TCP_DENIED/403,action=edit 321390 TCP_DENIED/403,action=submit 33 TCP_MISS/000,action=edit 7352 TCP_MISS/000,action=submit 1186 TCP_MISS/200,action=edit 800200 TCP_MISS/200,action=submit 75768 TCP_MISS/206,action=edit 20 TCP_MISS/206,action=submit 269 TCP_MISS/301,action=edit 662 TCP_MISS/302,action=edit 184217 TCP_MISS/302,action=submit 116141 TCP_MISS/400,action=edit 6 TCP_MISS/403,action=edit 2746 TCP_MISS/404,action=edit 119 TCP_MISS/404,action=submit 206 TCP_MISS/417,action=edit 53 TCP_MISS/417,action=submit 716 TCP_MISS/500,action=edit 362 TCP_MISS/500,action=submit 81 TCP_MISS/502,action=submit 87 TCP_MISS/503,action=edit 7 TCP_MISS/503,action=submit 5878 TCP_MISS/504,action=edit 53 TCP_MISS/504,action=submit 91 Out of these most significant given range and/or frequency are: TCP_DENIED/403,action=edit 321390 TCP_MISS/000,action=edit 7352 TCP_MISS/200,action=edit 800200 TCP_MISS/302,action=edit 184217 TCP_MISS/000,action=submit 1186 TCP_MISS/200,action=submit 75768 TCP_MISS/302,action=submit 116141 Specific questions: A Any idea why there are so many TCP_DENIED/403, are these really failures ? B For action=submit the difference between preview and save is in the result codes right ? I understood earlier that TCP_MISS/302 is a successful save, right ? Does that mean TCP_MISS/200 is preview ? C For action=edit how to interpret /200 vs /302 ? D (minor) Are TCP/000 indeed (invalid) UDP messages ? Erik Zachte BTW For all squid status codes from Wikimedia servers see http://stats.wikimedia.org/wikimedia/squids/SquidReportMethods.htm