1051015254.733 = time (epoch)
rgrds,
Bart
Quoting Bruno Leonhardt <BLeonhardt@analytek.de>:
> Here are some log-entries from access.log - where is the time ?
>
> 1051015254.733 962 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015254.734 1991 192.168.1.0 TCP_MISS/200 3645 GET
> http://www.analytek.de/oben.php? bleonhardt DIRECT/www.analytek.de te
> 1051015256.628 276 192.168.1.0 TCP_REFRESH_HIT/200 5153 GET
> http://www.analytek.de/home/kontakt.html bleonhardt DIRECT/www
> 1051015256.735 781 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015256.959 330 192.168.1.0 TCP_REFRESH_HIT/200 25510 GET
> http://www.analytek.de/home/pictures/kontakt.jpg bleonhardt D
> 1051015258.131 4 192.168.1.0 TCP_IMS_HIT/304 217 GET
> http://www.analytek.de/home/partner.html bleonhardt NONE/- text/htm
> 1051015258.549 775 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015259.566 4 192.168.1.0 TCP_IMS_HIT/304 220 GET
> http://www.analytek.de/home/referenzen.html bleonhardt NONE/- text/
> 1051015260.838 1704 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015261.346 504 192.168.1.0 TCP_IMS_HIT/304 220 GET
> http://www.analytek.de/home/referenzen.html bleonhardt NONE/- text/
> 1051015261.741 393 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015262.321 288 192.168.1.0 TCP_MISS/200 1100 GET
> http://www.analytek.de/home/standort.html bleonhardt DIRECT/www.analy
> 1051015262.401 547 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015262.681 358 192.168.1.0 TCP_REFRESH_HIT/200 9234 GET
> http://www.analytek.de/home/pictures/standort.gif bleonhardt D
> 1051015264.389 277 192.168.1.0 TCP_REFRESH_HIT/200 7840 GET
> http://www.analytek.de/home/wirueberuns.html bleonhardt DIRECT
> 1051015265.151 1067 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015265.197 808 192.168.1.0 TCP_MISS/200 35873 GET
> http://www.analytek.de/home/pictures/pyramide.jpg bleonhardt DIRECT/
> 1051015266.028 4 192.168.1.0 TCP_IMS_HIT/304 220 GET
> http://www.analytek.de/home/home.html bleonhardt NONE/- text/html
> 1051015266.070 41 192.168.1.0 TCP_IMS_HIT/304 240 GET
> http://www.analytek.de/home/home.swf bleonhardt NONE/- application/
> 1051015266.421 458 192.168.1.0 TCP_MISS/200 3808 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015267.039 12 192.168.1.0 TCP_HIT/200 9473 GET
> http://www.analytek.de/lotus/lotus.html bleonhardt NONE/- text/html
> 1051015267.403 540 192.168.1.0 TCP_MISS/200 3646 GET
> http://www.analytek.de/oben.php? bleonhardt DIRECT/www.analytek.de te
> 1051015267.410 369 192.168.1.0 TCP_REFRESH_HIT/200 11961 GET
> http://www.analytek.de/lotus/pictures/lotus.jpg bleonhardt DI
> 1051015267.534 511 192.168.1.0 TCP_MISS/200 4229 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
> 1051015267.602 66 192.168.1.0 TCP_REFRESH_MISS/000 0 GET
> http://www.analytek.de/pictures/i_lotus.jpg bleonhardt DIRECT/ww
> 1051015267.623 15 192.168.1.0 TCP_HIT/200 5516 GET
> http://www.analytek.de/exchange/info.html bleonhardt NONE/- text/html
> 1051015267.994 364 192.168.1.0 TCP_REFRESH_HIT/200 19257 GET
> http://www.analytek.de/exchange/pictures/exchange.jpg bleonha
> 1051015268.031 430 192.168.1.0 TCP_MISS/200 1744 GET
> http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
>
>
>
> Mit freundlichen Grüßen / Best regards
> Bruno Leonhardt
>
> Watchguard Certified System Professional
> CLP Domino R5 Systemadministrator
>
>
> Henrik Nordstrom <hno@squid-cache.org> schrieb am 23.04.2003 08:31:37:
>
> > On Wednesday 23 April 2003 08.14, Bruno Leonhardt wrote:
> > > Ok, thank's...
> > >
> > > ...real surftime is (IMHO) if a user was visiting a web-site longer
> > > than 5 Minutes ... maybe it's possible to get the first and the
> > > last time some data has been transfered - then comparing if this
> > > exceeds 5 Minutes ( 300 sec. ) and only this will be logged in an
> > > additionally log-file (with start/end-time, url, user, transfered
> > > data)....
> > >
> > > would that be possible ?
> >
> > This information is easily derivable from access.log.
> >
> > In access.log you have the time and duration of each users requests,
> > just write a small script which collects the information you want to
> > have from there. I would recommend using perl or awk for the purpose.
> >
> > Regards
> > Henrik
> >
> > --
> > Donations welcome if you consider my Free Squid support helpful.
> > https://www.paypal.com/xclick/business=hno%40squid-cache.org
> >
> > If you need commercial Squid support or cost effective Squid or
> > firewall appliances please refer to MARA Systems AB, Sweden
> > http://www.marasystems.com/, info@marasystems.com
>
>
Schelstraete Bart
bart@schelstraete.org - http://www.schelstraete.org
http://langmixer.mozdev.org
Received on Wed Apr 23 2003 - 06:21:30 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:15:14 MST
