Apache Log Analysis

 

This article is from the network security technology blog

Apache logs are generally stored in the/var/apache2 directory (for Windows, In the installation directory log folder)

 

If you change the log address, don't look at it...

 

========================================================== ========================================

 

The following is a log.

 

 

 

123.116.154.135/favicon. ico-[24/Jan/2011: 19: 31: 00 + 0800] "GET/HTTP/1.1" 200 4520 "-" "Mozilla/5.0 (Windows; U; windows NT 5.1; zh-CN; rv: 1.9.2.13) Gecko/20101203 Firefox/3.6.13"

 

It is simpler and clearer than iis apache logs

 

The preceding 123.116.154.135 is the visitor's IP address.

 

/Favicon. ico request file

 

[24/Jan/2011: 19: 31: 00 + 0800] indicates the access time.

Jan refers to the month, which is written in English.

Day/month/year hour: minute: Second

 

GET/HTTP/1.1 uses the http1.1 protocol to GET a file. Of course, if it is POST, it indicates it is POST.

 

200 status code, such as 404 failure to find webpage 500 server error, etc.

 

 

Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv: 1.9.2.13) Gecko/20101203 Firefox/3.6.13

Visitor Information: Firefox/3.6.13 WindowsNT5.1, WinXP