Re: How to analyse squid logs and wierd time stamps

[Murray Taylor]

On Thu, 2003-06-05 at 09:37, Sergey Akifyev wrote:
> On Thu, 2003-06-05 at 05:50, Murray Taylor wrote:
> > Strange as it seems ... one of our netadmins came 
> > to me with the same query, so I created this little program
> How about following :)
>   date -r 

True ... but then I wouldnt have got a chance to explore the 
vagaries of the time functions ... 8-)

explore ... practice ... dig and delve



This Email has been scanned for Viruses by MailMarshal.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: How to analyse squid logs and wierd time stamps

[Sergey Akifyev]

On Thu, 2003-06-05 at 05:50, Murray Taylor wrote:
> Strange as it seems ... one of our netadmins came 
> to me with the same query, so I created this little program
How about following :)
date -r 
-- 
regards,
Sergey Akifyev <[EMAIL PROTECTED]>
JSC Gascom 
PGP key available from:
ftp://ftp.gascom.ru/pub/PGP-keys/asa.txt


signature.asc
Description: This is a digitally signed message part

Solved!! > Re: How to analyse squid logs and wierd time stamps

[keith]

Hi..what legends are FBSD people!
Keith


> [EMAIL PROTECTED] wrote:
> [ ... ]
>> 1049884671.477240 10.0.1.121 TCP_HIT/200 744 GET
>> ftp://ftpav.ca.com/pub/inoculan/scaneng/Siglist.txt - NONE/-
>> text/plain ... Whoa!
>> Anyone know of a port to analyse this stuff and change what MIGHT be a
>> timestamp to something a mortal like me can read??
>
> Sure.  Install /usr/ports/net/adns and /usr/ports/www/analog.  Check out
> and  update the analog config file in /usr/local/etc.
>
> cd to where your log files are, and DNS resolve the IPs via:
>
> adnslogres -c 2 < access_log > access_log.dns
>
> ...then run analog against this (DNS-resolved) logfile, and it will
> generate  lots of info.  You can also do other things with the
> DNS-resolved logfile using  other tools, but most of 'em will prefer to
> start with the output of adnslogres,  so that step is worth doing.
>
> -Chuck





___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: How to analyse squid logs and wierd time stamps

[Chuck Swiger]

[EMAIL PROTECTED] wrote:
[ ... ]
1049884671.477240 10.0.1.121 TCP_HIT/200 744 GET
ftp://ftpav.ca.com/pub/inoculan/scaneng/Siglist.txt - NONE/- text/plain
... Whoa!
Anyone know of a port to analyse this stuff and change what MIGHT be a
timestamp to something a mortal like me can read??
Sure.  Install /usr/ports/net/adns and /usr/ports/www/analog.  Check out and 
update the analog config file in /usr/local/etc.

cd to where your log files are, and DNS resolve the IPs via:

adnslogres -c 2 < access_log > access_log.dns

...then run analog against this (DNS-resolved) logfile, and it will generate 
lots of info.  You can also do other things with the DNS-resolved logfile using 
other tools, but most of 'em will prefer to start with the output of adnslogres, 
so that step is worth doing.

-Chuck

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: How to analyse squid logs and wierd time stamps

[Murray Taylor]

Strange as it seems ... one of our netadmins came 
to me with the same query, so I created this little program


#include 
#include 

void main(int argc, char *argv[]) {

time_t clockval;

if ( argc != 2 ) {
printf("\nUsage: ctime time_in_seconds\n");
printf("returns DDD MMM dd HH:MM:SS \n");
printf("  in local timezone ...\n\n");
printf("To get GMT use\n");
printf("env TZ=GMT ctime time_in_seconds\n\n");
return;
}

argv++;

sscanf(argv[0],"%lu", &clockval);
printf("clockval = %ld\n", clockval);
printf ("time = %s\n", ctime(&clockval));

}

It should be self explanatory once compiled ...

cheers
mjt

On Thu, 2003-06-05 at 01:39, [EMAIL PROTECTED] wrote:
> Hi all,
> Here is a squid log sample...
> 1049884671.477240 10.0.1.121 TCP_HIT/200 744 GET
> ftp://ftpav.ca.com/pub/inoculan/scaneng/Siglist.txt - NONE/- text/plain
> ... Whoa!
> Anyone know of a port to analyse this stuff and change what MIGHT be a
> timestamp to something a mortal like me can read??
> Appreciate help
> Keith
> 
> 
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
> 
> This Email has been scanned for Viruses by MailMarshal.
> 



This Email has been scanned for Viruses by MailMarshal.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

How to analyse squid logs and wierd time stamps

[keith]

Hi all,
Here is a squid log sample...
1049884671.477240 10.0.1.121 TCP_HIT/200 744 GET
ftp://ftpav.ca.com/pub/inoculan/scaneng/Siglist.txt - NONE/- text/plain
... Whoa!
Anyone know of a port to analyse this stuff and change what MIGHT be a
timestamp to something a mortal like me can read??
Appreciate help
Keith


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"