Thanks for the suggestion. I created a custom Logformat entry for the
ssl_request_log. (to avoid double counting the GETs and bytes, I used %j)
LOGFORMAT ([%d/%M/%Y:%h:%n:%j %j] %S %B %u "%j %j %j" %j)
[19/Jan/2001:06:51:25 -0800] 127.0.0.1 SSLv3 RC4-MD5 "GET / HTTP/1.1"
11841
[19/Jan/2001:09:30:42 -0800] 127.0.0.1 TLSv1 EDH-RSA-DES-CBC3-SHA "GET /
HTTP/1.0" 8214
The ssl_engine_log has 5 lines per request, so it wouldn't work with this
file.
[19/Jan/2001 09:30:40 00571] [info] Connection to child 5 established
(server localhost:443, client 127.0.0.1)
[19/Jan/2001 09:30:40 00571] [info] Seeding PRNG with 1160 bytes of
entropy
[19/Jan/2001 09:30:41 00571] [info] Connection: Client IP: 127.0.0.1,
Protocol: TLSv1, Cipher: EDH-RSA-DES-CBC3-SHA (168/168 bits)
[19/Jan/2001 09:30:41 00571] [info] Initial (No.1) HTTPS request received
for child 5 (server localhost:443)
[19/Jan/2001 09:30:42 00571] [info] Connection to child 5 closed with
standard shutdown (server localhost:443, client 127.0.0.1)
On Fri, 19 Jan 2001, Jeremy Wadsack wrote:
> Walter Greenwood wrote:
>
> > Is it possible to use analog to generate reports for ssl logs, i.e.
> > ssl_engine_log ? It works great for access_log, and I'd like to create
> > similar stats for SSL usage. If not, is there another tool that could be
> > used for this? I've searched all the lists of log analysers and haven't
> > found any mention of ssl logs.
>
> Analog will read almost any kind of log file, you just need to make a
> LOGFORMAT string to match the file (if it isn't autodetected). See
> docs/logfmt.html for details.
>
> --
>
> Jeremy Wadsack
> Wadsack-Allen Digital Group
>
> ------------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe" in the main BODY OF THE MESSAGE.
> List archived at http://www.mail-archive.com/[email protected]/
> ------------------------------------------------------------------------
>
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
