Hi all,

Recently, I was wondering why I was getting an odd failure from mattoclf
in my cron mails -- so I went digging.  Apparently, when the parameter $5
(the request's Host:) ends up being '-', gawk will puke -- it translates to:
printf <format> <args>  > -

This can be reproduced in the logs by:
telnet www.example.com 80
GET /index.html HTTP/1.0

mathopd will spit out a 400, and the log will have, with one field per line:
$1: Wed Oct 14 06:38:50 2009
$2: -
$3: 10.0.0.1
$4: 33886
$5: -
$7:GET
$8:/index.html
$9:400
etc.

Updating mattoclf to translate the - to "invalid" fixed it for me.  However,
I don't know what the expected results are for most people using log parsers.

Comments?

-- DN
Daniel



I updated my copy to translate that - to 

Reply via email to