I'm monitoring Squid access.log, expecting to see when an application opens some websocket connections. But new records seem to appear only when the connections are closed (although I'm not 100% sure about that).
Is it expected behavior for Squid? If yes, then maybe there's a way to log connections when they are opened, or I should better use something like Wireshark for that?