On Friday, February 18, 2005 8:21 PM [GMT], Chris Blackstone <[EMAIL PROTECTED]> wrote:
> I'm trying to analyze an ssl log file and extract what pages people > request, but I can't correct extract what page was requested > > Here is my LOGFORMAT > LOGFORMAT ([%d/%M/%Y:%h:%n:%j] %j %j %j "%r" %b) > > Here is a snippet of my log file > [23/Jan/2005:19:53:25 -0500] 158.59.253.50 SSLv3 RC4-MD5 "GET > /public/images/red_dot.gif HTTP/1.1" 79 > [23/Jan/2005:19:53:25 -0500] 158.59.253.50 SSLv3 RC4-MD5 "GET > /public/images/crumbmain.gif HTTP/1.1" 498 > > When I run the report, %r only returns GET /, though, and if I try to > add %j to skip the GET, I get nothing back in the Request report. Using this LOGFORMAT (%j for GET and for HTTP/1.1) LOGFORMAT ([%d/%M/%Y:%h:%n:%j] %j %j %j "%j %r %j" %b) I get this Request Report: reqs: %bytes: last time: file ----: ------: ---------------: ---- 1: 86.31%: 23/Jan/05 19:53: /public/images/crumbmain.gif 1: 13.69%: 23/Jan/05 19:53: /public/images/red_dot.gif Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
