Re: access.log

From: Jeff Barrow <jeffb-squid@dont-contact.us>
Date: Mon, 7 Dec 1998 12:59:54 -0600

>It is possible to log _actual_ ip address of source host to access.log
>instead of hostname?

Since I can see where this would be usefull (for instance, verifying that it
is correctly rotating through the servers in a server farm, recognizing when
a host comes back up, etc etc, or seeing which server in a farm is
misbehaving...) I'm working on a patch to do just this. It is going to take
a few changes (I'm still chasing down where: access_log.c of course, and
comm.c when the connection is openned (I think I have access to the original
request structure here) and structs.h to change the _request_t structure

>
>for example change
>
>907192856.443 2664 194.247.133.172 TCP_MISS/200 9305 GET
>+http://search.yahoo.com/bin/search - DIRECT/search.yahoo.com text/html
>
>to
>
>907192856.443 2664 194.247.133.172 TCP_MISS/200 9305 GET
>+http://search.yahoo.com/bin/search - DIRECT/204.71.200.127 text/html

I'll do one better:
907192856.443 2664 194.247.133.172 TCP_MISS/200 9305 GET
http://search.yahoo.com/bin/search - DIRECT/search.yahoo.com[204.71.200.127]
text/html

Naturally if it retrieves this from the local cache it won't report an IP
address.

One of the biggest problems is that as soon as the request goes out, the
ipcache is told to cycle the addresses (for sites with multiple IP
addresses), and this can be further complicated by multiple requests to the
same host (it could have cycled multiple times before the log goes out) so
I'll have to mark which IP address the connection itself was made to.

--Jeff Barrow, Internet Connections, Inc.
Received on Mon Dec 07 1998 - 12:05:35 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:43:34 MST