I am running analog 4.13 and apache 1.3.14.
I have configured Apache with the following log format:
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %T %v" full
Analog is configured with the following:
APACHEDEFAULTLOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"
%T %v)
DEFAULTLOGFORMAT COMBINED
DEFAULTLOGFORMAT COMMON
The problem is that analog is not able to handle the 408 (request
timed out) responses that apache log. These lines look like:
sunsite% grep " 408 " /pack/apache/log/2000/11/access.20001115
132.195.5.45 - - [15/Nov/2000:00:01:44 +0100] "-" 408 - "-" "-" 0 sunsite.dk
216.35.103.54 - - [15/Nov/2000:00:06:24 +0100] "-" 408 - "-" "-" 0 sunsite.dk
132.195.5.45 - - [15/Nov/2000:00:13:09 +0100] "-" 408 - "-" "-" 0 sunsite.dk
132.195.5.45 - - [15/Nov/2000:00:14:04 +0100] "-" 408 - "-" "-" 0 sunsite.dk
In init.c you have:
char *apachelogfmt(char *fmt) {
extern char *workspace; /* assume large enough, as usual */
char *p, *q;
workspace[0] = '\0';
for (p = fmt; *p != '\0'; p++) {
if (*p == '\\' && *(p + 1) != '\0')
p++;
if (*p == '%' && *(p + 1) != '\0') {
p++;
while (ISDIGIT(*p) || *p == ',' || *p == '!' || *p == '<' || *p == '>')
p++;
if (*p == 'b')
strcat(workspace, "%b");
......
else if (*p == 'r')
strcat(workspace, "%j%w%r%wHTTP%j");
else if (*p == 't')
......
As you can see, the above conversion to "%j%w%r%wHTTP%j" do not work
for 408 log lines. I don't know enough about the analog source code
to suggest the best way to fix this, but a fix would be nice :)
One could argue that Apache is broken with its log format, but then
again, there is no valid request string to log, so the "-" seems like
the only real thing to log.
Best regards, and thanks for the worlds best web logfile analyser
software!
/bart
--
caffeine low .... brain halted
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
