Mailing List Archive

analog-help: malformed log lines?
First I get a warning about too many corrupt lines in the log file. Next,
I get a warning from analog that says lines are corrupt and that I should try
a different log format. Here are some examples of the corrupt lines:

C: 202.112.8.140 - - [20/Nov/1998:07:29:24 -0800] "GET http://www.yahoo.com/" 40
3 - "-" "-" GET http://www.yahoo.com/
C: 202.112.110.146 - - [20/Nov/1998:23:20:00 -0800] "-" 200 - "-" "-" GET -
C: 202.112.110.166 - - [22/Nov/1998:03:40:58 -0800] "-" 200 - "-" "-" GET -

Most of the lines in my log are in the combined format, and are processed
just fine. What logformat will handle these bad ones?


Thanks,
curtis

--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request@lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------
Re: analog-help: malformed log lines? [ In reply to ]
On Tue, 1 Dec 1998, Curtis Foon wrote:

> First I get a warning about too many corrupt lines in the log file. Next,
> I get a warning from analog that says lines are corrupt and that I should try
> a different log format. Here are some examples of the corrupt lines:
>
> C: 202.112.8.140 - - [20/Nov/1998:07:29:24 -0800] "GET http://www.yahoo.com/" 40
> 3 - "-" "-" GET http://www.yahoo.com/
> C: 202.112.110.146 - - [20/Nov/1998:23:20:00 -0800] "-" 200 - "-" "-" GET -
> C: 202.112.110.166 - - [22/Nov/1998:03:40:58 -0800] "-" 200 - "-" "-" GET -
>
> Most of the lines in my log are in the combined format, and are processed
> just fine. What logformat will handle these bad ones?
>

Well, these lines certainly look really corrupt to me. I'm not sure what
information you would hope to get out of them.I wouldn't try and make a
format to catch them, if they're this faulty.

Do you have a lot of lines of this type? If so, there is probably
something wrong with your server. Or if you're using Apache and logging to
a pipe, maybe you should see if something's wrong with the program on the
other end of the pipe.

--
Stephen Turner sret1@cam.ac.uk http://www.statslab.cam.ac.uk/~sret1/
Normally: Statistical Laboratory, 16 Mill Lane, Cambridge CB2 1SB, England
Until 12/98: Dept of Math & Stats, 585 King Edward Ave, Ottawa K1N 6N5, Canada
Microsoft: Where am I allowed to go today?

--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to analog-help-request@lists.isite.net
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------