On 8 Dec 2000, Esben Haabendal Sorensen wrote:
>
> APACHEDEFAULTLOGFORMAT (%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"
>%T %v)
> The problem is that analog is not able to handle the 408 (request
> timed out) responses that apache log. These lines look like:
>
> 132.195.5.45 - - [15/Nov/2000:00:01:44 +0100] "-" 408 - "-" "-" 0 sunsite.dk
>
> As you can see, the above conversion to "%j%w%r%wHTTP%j" do not work
> for 408 log lines. I don't know enough about the analog source code
> to suggest the best way to fix this, but a fix would be nice :)
>
Yes, you're right. The reason is that analog only converts each
APACHELOGFORMAT string to a single LOGFORMAT string. Really you need several
LOGFORMAT strings to specify all the possible quirks like this one. I've
just never thought that a small number of lines misdiagnosed as corrupt was
worth it. You can fix it by adding extra LOGFORMATs if you want.
--
Stephen Turner http://www.statslab.cam.ac.uk/~sret1/
Statistical Laboratory, Wilberforce Road, Cambridge, CB3 0WB, England
"The Hubble Space Telescope has shut itself down, preventing astronomers
from making any observations of the Universe." (BBC News, 15 Nov 1999)
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
