Re: Re: Re: [squid-users] Logging the "real" Surftime

From: Bruno Leonhardt <BLeonhardt@dont-contact.us>
Date: Wed, 23 Apr 2003 09:52:53 +0200

Here are some log-entries from access.log - where is the time ?

1051015254.733 962 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015254.734 1991 192.168.1.0 TCP_MISS/200 3645 GET
http://www.analytek.de/oben.php? bleonhardt DIRECT/www.analytek.de te
1051015256.628 276 192.168.1.0 TCP_REFRESH_HIT/200 5153 GET
http://www.analytek.de/home/kontakt.html bleonhardt DIRECT/www
1051015256.735 781 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015256.959 330 192.168.1.0 TCP_REFRESH_HIT/200 25510 GET
http://www.analytek.de/home/pictures/kontakt.jpg bleonhardt D
1051015258.131 4 192.168.1.0 TCP_IMS_HIT/304 217 GET
http://www.analytek.de/home/partner.html bleonhardt NONE/- text/htm
1051015258.549 775 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015259.566 4 192.168.1.0 TCP_IMS_HIT/304 220 GET
http://www.analytek.de/home/referenzen.html bleonhardt NONE/- text/
1051015260.838 1704 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015261.346 504 192.168.1.0 TCP_IMS_HIT/304 220 GET
http://www.analytek.de/home/referenzen.html bleonhardt NONE/- text/
1051015261.741 393 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015262.321 288 192.168.1.0 TCP_MISS/200 1100 GET
http://www.analytek.de/home/standort.html bleonhardt DIRECT/www.analy
1051015262.401 547 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015262.681 358 192.168.1.0 TCP_REFRESH_HIT/200 9234 GET
http://www.analytek.de/home/pictures/standort.gif bleonhardt D
1051015264.389 277 192.168.1.0 TCP_REFRESH_HIT/200 7840 GET
http://www.analytek.de/home/wirueberuns.html bleonhardt DIRECT
1051015265.151 1067 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015265.197 808 192.168.1.0 TCP_MISS/200 35873 GET
http://www.analytek.de/home/pictures/pyramide.jpg bleonhardt DIRECT/
1051015266.028 4 192.168.1.0 TCP_IMS_HIT/304 220 GET
http://www.analytek.de/home/home.html bleonhardt NONE/- text/html
1051015266.070 41 192.168.1.0 TCP_IMS_HIT/304 240 GET
http://www.analytek.de/home/home.swf bleonhardt NONE/- application/
1051015266.421 458 192.168.1.0 TCP_MISS/200 3808 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015267.039 12 192.168.1.0 TCP_HIT/200 9473 GET
http://www.analytek.de/lotus/lotus.html bleonhardt NONE/- text/html
1051015267.403 540 192.168.1.0 TCP_MISS/200 3646 GET
http://www.analytek.de/oben.php? bleonhardt DIRECT/www.analytek.de te
1051015267.410 369 192.168.1.0 TCP_REFRESH_HIT/200 11961 GET
http://www.analytek.de/lotus/pictures/lotus.jpg bleonhardt DI
1051015267.534 511 192.168.1.0 TCP_MISS/200 4229 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t
1051015267.602 66 192.168.1.0 TCP_REFRESH_MISS/000 0 GET
http://www.analytek.de/pictures/i_lotus.jpg bleonhardt DIRECT/ww
1051015267.623 15 192.168.1.0 TCP_HIT/200 5516 GET
http://www.analytek.de/exchange/info.html bleonhardt NONE/- text/html
1051015267.994 364 192.168.1.0 TCP_REFRESH_HIT/200 19257 GET
http://www.analytek.de/exchange/pictures/exchange.jpg bleonha
1051015268.031 430 192.168.1.0 TCP_MISS/200 1744 GET
http://www.analytek.de/links.php? bleonhardt DIRECT/www.analytek.de t

Mit freundlichen Grüßen / Best regards
Bruno Leonhardt

Watchguard Certified System Professional
CLP Domino R5 Systemadministrator

Henrik Nordstrom <hno@squid-cache.org> schrieb am 23.04.2003 08:31:37:

> On Wednesday 23 April 2003 08.14, Bruno Leonhardt wrote:
> > Ok, thank's...
> >
> > ...real surftime is (IMHO) if a user was visiting a web-site longer
> > than 5 Minutes ... maybe it's possible to get the first and the
> > last time some data has been transfered - then comparing if this
> > exceeds 5 Minutes ( 300 sec. ) and only this will be logged in an
> > additionally log-file (with start/end-time, url, user, transfered
> > data)....
> >
> > would that be possible ?
>
> This information is easily derivable from access.log.
>
> In access.log you have the time and duration of each users requests,
> just write a small script which collects the information you want to
> have from there. I would recommend using perl or awk for the purpose.
>
> Regards
> Henrik
>
> --
> Donations welcome if you consider my Free Squid support helpful.
> https://www.paypal.com/xclick/business=hno%40squid-cache.org
>
> If you need commercial Squid support or cost effective Squid or
> firewall appliances please refer to MARA Systems AB, Sweden
> http://www.marasystems.com/, info@marasystems.com
Received on Wed Apr 23 2003 - 01:50:47 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:15:13 MST