Log analysis notes

Common fields in website logs:

8 bits = 1 byte 8bit = 1 byte

Inside the computer, all information is expressed in the form of binary numbers, namely "0" and "1". Therefore, the basic unit of storage is bit, abbreviated as b.

The computer can only remember 0 and 1, so a 0 or 1 is a bit, and a bit is a bit, because the bit is too small and a bit cannot carry any information. Therefore, 8 0s or 1s form a byte, one byte can represent a letter, and two bytes can represent a Chinese character.

  -Bytes sent (sc-bytes): The number of bytes sent by the server.

  -Bytes received (cs-bytes): The number of bytes received by the server.

        -Date (date): the date of the request.

  -Time (time): The time when the request was made (Coordinated Universal Time (UTC)).

  -Client IP address (c-ip): The IP address of the client making the request.

  -Username (cs-username): The name of the authenticated user who accesses the server. Anonymous users are represented by hyphens.

  -Service name (s-sitename): The site instance number that satisfies the request.

  -Server name (s-computername): The name of the server that generated the log file entry.

  -Server IP address (s-ip): The IP address of the server that generated the log file entry.

  -Server port (s-port): The server port number configured for the service.

  -Method (cs-method): The requested operation, such as the GET method.

  -URI resource (cs-uri-stem): the uniform resource identifier or target of the operation.

  -URI query (cs-uri-query): The query (if any) the client is trying to execute. Only dynamic pages require Uniform Resource Identifier (URI) queries.

  -Protocol status (sc-status): HTTP or FTP status code.

  -Protocol substatus (sc-substatus): HTTP or FTP substatus code.

  -Win32 status (sc-win32-status): Windows status code.

  -Time-taken (time-taken): The time taken by the operation (milliseconds).

  -Protocol version (cs-version): The protocol version (HTTP or FTP) used by the client.

  -Host (cs-host): Host name (if any).

  -User Agent (cs(UserAgent)): The browser type used by the client.

  -Cookie (cs(Cookie)): The content of the cookie sent or received (if any).

  -Referer site (cs(Referer)): The site last visited by the user. This site provides a link to the current site.

date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status sc-bytes cs-bytes 

Guess you like

Origin blog.csdn.net/qq_32393893/article/details/105832015