Current User: Guest Login
Please consider registering


Lost Your Password?

Search Forums:


 






Minimum search word length is 4 characters – Maximum search word length is 84 characters
Wildcard Usage:
*  matches any number of characters    %  matches exactly one character

Help needed

Reply to Post Add a New Topic
UserPost

2:05 pm
December 15, 2015


demarcao

Member

posts 10

I have added to my apache logs the TLS version that the client connects with:

 

#Fields:    date time x-GWXTLS x-GWXCIPH x-GWXFF s-sitename s-ip cs-method cs-uri s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs-host sc-status sc-substatus time-taken bytes cs(Referer)

x-GWXTLS is the TLS version, I want to add an extra section that reports the various versions that clients are connecting with. I am at a loss on how to really do this.

I have this but know it is far from correct, any pointers would be appreciated.

 

ExtraSectionName1="Tls Report"
ExtraSectionCodeFilter1="200 304"
ExtraSectionCondition1="URL,\/"
ExtraSectionFirstColumnTitle1="TLS Version"
ExtraSectionFirstColumnValues1="extra1,([0-9]*)$"
ExtraSectionFirstColumnFormat1="%s"
ExtraSectionStatTypes1=P
ExtraSectionAddAverageRow1=0
ExtraSectionAddSumRow1=0
MaxNbOfExtra1=200
MinHitExtra1=1

2:14 pm
December 15, 2015


demarcao

Member

posts 10

So I the first 2 lines are correct:

ExtraSectionName1="Tls Report"
ExtraSectionCodeFilter1="200 304"

 

However this line:

ExtraSectionCondition1="URL,\/"   this condition should be that extra1 is NOT blank, not sure how I check for not blank?

2:18 pm
December 15, 2015


demarcao

Member

posts 10

I think this will work:

ExtraSectionCondition2="extra1,^(?!\s*$).+"

2:22 pm
December 15, 2015


demarcao

Member

posts 10

So the data in the logs looks like this:

 

2015-12-15    05:00:06    TLSv1.2    DES-CBC3-SHA    54.209.60.63    -  ………..

2015-12-15    05:00:10    TLSv1    DES-CBC3-SHA    136.223.16.161    -   ………..

 

So would like a tally of the various TLSv types:   TLSv1, TLSv1.1, TLSv1.2 but ignore when the field is empty/blank

2:45 pm
December 15, 2015


Jean-Luc

Admin

posts 1125

Hi,

Did you try this ?

ExtraSectionFirstColumnValues1="extra1,^(.*)$"

 

What do you get with the above line ?

 

Keep in mind that the extra section data are parts of the AWStats database: they are updated only when AWStats is updated, ie. the extra section data are created when the log file is parsed.

Reply to Post

Reply to Topic:
Help needed

Guest Name (Required):

Guest Email (Required):

NOTE: New Posts are subject to administrator approval before being displayed

Smileys
Confused Cool Cry Embarassed Frown Kiss Laugh Smile Surprised Wink Yell
Post New Reply

Guest URL (required)

Math Required!
What is the sum of:
2 + 11
   


About the InternetOfficer.com Forum

Forum Timezone: UTC 1

Most Users Ever Online: 201

Currently Online:
7 Guests

Currently Browsing this Topic:
1 Guest

Forum Stats:

Groups: 2
Forums: 9
Topics: 636
Posts: 2710

Membership:

There are 257 Members
There have been 304 Guests

There is 1 Admin
There is 1 Moderator

Top Posters:

cssfsu – 55
deepakgupta – 34
albert_newton – 30
cosminpana – 20
DTNMike – 19
ahtshun83 – 17

Recent New Members: raju, todd2taylor, sbdcunha, mansigill1987, ThomasDuh, ThomasKic

Administrators: Jean-Luc (1125 Posts)

Moderators: Jean-Luc (1125 Posts)