Hi all, Recently, I was wondering why I was getting an odd failure from mattoclf in my cron mails -- so I went digging. Apparently, when the parameter $5 (the request's Host:) ends up being '-', gawk will puke -- it translates to: printf <format> <args> > -
This can be reproduced in the logs by: telnet www.example.com 80 GET /index.html HTTP/1.0 mathopd will spit out a 400, and the log will have, with one field per line: $1: Wed Oct 14 06:38:50 2009 $2: - $3: 10.0.0.1 $4: 33886 $5: - $7:GET $8:/index.html $9:400 etc. Updating mattoclf to translate the - to "invalid" fixed it for me. However, I don't know what the expected results are for most people using log parsers. Comments? -- DN Daniel I updated my copy to translate that - to