common2dlf1

Usage

Overview

common2dlf converts Common Log Format web server log files to the www DLF. Common Log Format is a standard log format that was originally implemented in the CERN httpd web server but that now supported nowadays by most web servers. Apache, IIS, Boa and PureFTPD can be configured to log in that format.

If the file argument is missing, STDIN will get parsed. DLF will be printed on STDOUT.

Common log format

The Common Log Format has the following format:

remotehost rfc931 authuser [date] "request" status bytes

where the fields have the following meaning:

remotehost

The host that made the request. Can be an IP or a hostname.

rfc931

The result of an ident lookup on the host. This is usually never used.

authuser

The authenticated username.

date

The timestamp of the request.

request

The first line of the request. Usually in the format "method request-uri http-version".

See also RFC 2616, section 5.1.

status

The result status of the request. i.e. 200, 301, 404, 500.

bytes

The size of the request sent to the client.

Log example:

  127.0.01 - - [11/03/2001 12:12:01 -0400] "GET / HTTP/1.0" 200 513
  dsl1.myprovider.com - francis [11/03/2001 12:14:01 -0400] "GET /secret/ HTTP/1.0" 200 1256

Examples

To process a log as produced in the common logformat:

 $ lr_run common2dlf < common.log

common2dlf will be rarely used on its own, but is more likely called by lr_log2report:

 $ lr_log2report common < /var/log/httpd/common.log

Version

$Id: common2dlf.in,v 1.15 2006/07/23 13:16:36 vanbaal Exp $