Re: Problems with log analysis scripts

Greetings Neil,

> - Neil, could you please explain the extra '+' that you have added :
> -
> - unless (/^([\d\.]+) \S+ \S+ \[([^\]]+)\] "(\w+) ([^"]+)" (\w+) (\d+)$/)
> - unless (/^([\d\.]+) \S+ \S+ \[([^\]]+)\] "(\w+) ([^"]+)"+ (\w+):\w+ (\d+)$/)
> -
> The extra plus handles the case where some user has a URL that ends
> with a '"' in the access.log you end up with '""' causing a
> parse_common_log: Bad input, line nnnnn
> to be emitted. I tried a number of improvements but in the end I backed out
> most of them as not worth it and the number of 'Bad input' lines per run is
> only ~100. The extra plus I left in.

Thanks for explaining this. I will add the extra plus also.

> One of the reasons for swaping to squid's 'native' log format is that
> pulling apart the log format is easier.

Have now switched to using the 'native' format.

Thanks for all your help.

Regards,

Andrew

Unix Systems Administrator Phone : 61 +3 9214-8252
Computer and Network Services Fax : 61 +3 9214-8944
Swinburne University of Technology E-Mail: andrew@swin.EDU.AU
Hawthorn, Victoria, Australia 3122 URL: http://opax.swin.edu.au/andrew
Received on Thu Jan 23 1997 - 14:46:32 MST