Dave Fitch wrote:
>
> On Tue, Mar 27, 2001 at 01:45:23AM +1000, Rick Welykochy wrote:
> > ... - - [25/Mar/2001:22:15:56 +1000] "GET http://www.yahoo.com/ HTTP/1.1" 403 218
> > ... ^^^^^^^^^^^^^^^^^^^^^
> >
> > Is the ^^^^^ bit above perhaps specified in a LogFormat specifier in
> > your httpd.conf file.
> >
> > This would do it:
> > LogFormat "%h %l %u %t \"%{Referer}i\" %>s %b" common
>
> for LogFormat, my httpd.conf has:
>
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %T %v" full
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
> LogFormat "%h %l %u %t \"%r\" %>s %b" common
> LogFormat "%{Referer}i -> %U" referer
> LogFormat "%{User-agent}i" agent
>
> So what do you mean by "this would so it"?
> whatsit mean?
Each formatr has a name, found at the end of the format. The % bits are
pieces of each log entry.
The above look fine (standard distribution) so much hunch was wrong.
I has thought that perhaps the HTTP_REFERER (from the header) was being
recorded where the Request URI (%r) normally sits.
-rick
--
Rick Welykochy || Praxis Services Pty Limited
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
