Seacloak Software, Inc., Makers of the Traffic Report Log Analysis Tool For more information about Traffic Report Log Analysis Tool.
Download the latest version of our software.
Purchase a license for Traffic Report online!
View sample reports of our program.
For assistance, our Users Guide is online!
We provide Technical Support for our products.
Click here for information on how to contact Seacloak Software, Inc.
Find out more about who and what we are.
Seacloak Software, Inc., Makers of the Traffic Report Log Analysis Tool
Appendix A: Log Formats
FileMaker Pro Notes

These Logs come in two styles, Brief and Detailed. Their format is fixed so all you need to do is select the correct style from the Log Format popup and you’re ready to go.

A log entry in the Brief format looks similar to:

5/14/00 3:45:00 PM 207.94.140.111 /images/blueberry.gif

It contains the date and time of the transaction, the IP address of the visitor and the URL requested.

A log entry in the Detailed format looks similar to:

5/14/00 3:45:00 PM 207.94.140.111 /images/blueberry.gif
5/14/00 3:45:00 PM Got search argument.
5/14/00 3:45:00 PM -db=bumperStumper.db&cart=289
5/14/00 3:45:00 PM Sending reply. Elapsed time: 351 millisec.

In addition to containing the same information as the Brief format, it also includes transfer time and search argument information.

Microsoft IIS Notes

The MS IIS log format is not fixed; field order may be changed and fields may or may not be present. This log contains a secret note (called a directive) that tells what fields it contains and their order. It may look a lot like:

#Fields: date time c-ip cs-method cs-uri-stem cs(Referer) sc-status sc-bytes time-taken cs(User-Agent)

Its entries look similar to:

2000-05-14 15:45:00 207.94.140.111 GET /images/blueberry.gif http://www.apple.de/ 200 5120 750 Mozilla/5.0+(Macintosh;+U;+PPC)

The following table shows examples of log field content and how each is referenced by TrafficReport and this format’s field names:

TR Name Field Example Field Name
Date 2000-05-14 or 5/14/00 DATE
Time 15:45:00 TIME
Hostname 207.94.140.111 C-IP
Method GET CS-METHOD
URL /images/blueberry.gif CS-URI-STEM
Referrer http://www.apple.de/ CS(REFERER)
Result 200 SC-STATUS
Bytes Sent 5120 SC-BYTES
Transfer Time 750 [in milliseconds] TIME-TAKEN
Agent Mozilla/5.0 (Macintosh;U;PPC) CS(USER-AGENT)
SearchArgs ?db=bumperStumper.db&cart-289 CS-URI-QUERY

NCSA Notes

This is a generic format that is used by a number of different server software. Its entries look similar to:

207.94.140.111 - - [14/May/2000:15:45:00 -0100] "GET /images/blueberry.gif HTTP/1.0" 200 5120 "http://www.apple.de/" "Mozilla/5.0 (Macintosh; U; PPC)"

When you select NCSA from the Log Structure panel’s Log Format popup, TrafficReport automatically configures itself to understand the most common field layout for NCSA Logs. This log contains no secret note (called a directive) that tells what fields it contains and their order.

The following table shows examples of NCSA’s field content and how each is referenced by TrafficReport and this format’s fields:

TR Name Field Example Field Name
Date [14/May/2000:15:45:00 -0100] [DATE/TIME]
Time [14/May/2000:15:45:00 -0100] [DATE/TIME]
Hostname 207.94.140.111 HosTNAME
Method GET [METHOD/URL/P-ARGS/S-ARGS]
URL /images/blueberry.gif [METHOD/URL/P-ARGS/S-ARGS]
Referrer http://www.apple.de/ REFERRER
Result 200 RESULTS_CODE
Bytes Sent 5120 BYTES_SENT
Agent Mozilla/5.0 (Macintosh;U;PPC) AGENT
SearchArgs ?db=bumperStumper.db&cart-289 [METHOD/URL/P-ARGS/S-ARGS]

WebSTAR Common Notes

The WS Common log format is not fixed; field order may be changed and fields may or may not be present. This log contains a secret note (called a directive) that tells what fields it contains and their order. It may look a lot like:

!!LOG_FORMAT DATE TIME HosTNAME METHOD URL REFERER RESULT_CODE BYTES_SENT TIME_TAKEN AGENT PATH_ARGS SEARCH_ARGS

Its entries look similar to:

05/14/00 15:45:00 207.94.140.111 GET :images:blueberry.gif http://www.apple.de/ 200 5120 00:00:01 Mozilla/5.0 (Macintosh; U; PPC) $showcart ?db=bumperStumper.db&cart=289

The following table shows examples of log field content and how each is referenced by TrafficReport and this format’s field names:

TR Name Field Example Field Name
Date 05/14/00 DATE
Time 15:45:00 TIME
Hostname 207.94.140.111 HosTNAME
Method GET METHOD
URL /images/blueberry.gif URL
Referrer http://www.apple.de/ REFERRER
Result 200 RESULT or RESULTS_CODE
Bytes Sent 5120 BYTES_SENT
Transfer Time 121 [sixtieths of a second] or 00:00:02 TRANSFER_TIME or TIME_TAKEN
Agent Mozilla/5.0 (Macintosh;U;PPC) AGENT
SearchArgs ?db=bumperStumper.db&cart-289 SEARCH_ARGS

WebSTAR Extended Notes

The WS Extended log format is not fixed; field order may be changed and fields may or may not be present. This log contains a secret note (called a directive) that tells what fields it contains and their order. It may look a lot like:

#Fields: DATE TIME CS-IP CS-METHOD CS-URI CS(REFERER) CS-STATUS BYTES TIME_TAKEN CS(USER-AGENT) CS-URI-STEM CS-URI-QUERY

Its entries look similar to:

2000-05-14 15:45:00 207.94.140.111 GET /images/blueberry.gif "http://www.apple.de/" 200 5120 00:00:02 "Mozilla/5.0 (Macintosh; U; PPC)" $showcart ?db=bumperStumper.db&cart=289

The following table shows examples of log field content and how each is referenced by TrafficReport and this format’s field names:

TR Name Field Example Field Name
Date 2000-05-14 or 5/14/00 DATE
Time 15:45:00 TIME
Hostname 207.94.140.111 C-DNS, C-IP or CS-IP
Method GET CS-METHOD
URL /images/blueberry.gif CS-URI
Referrer http://www.apple.de/ CS(REFERER)
Result 200 CS-STATUS
Bytes Sent 5120 BYTES
Transfer Time 121 [sixtieths of a second] or 00:00:02 TIME-TAKEN
Agent Mozilla/5.0 (Macintosh;U;PPC) CS(USER-AGENT)
SearchArgs $showcart CS-URI-STEM
SearchArgs ?db=bumperStumper.db&cart-289 CS-URI-QUERY

Next: Glossary

Previous: Reducing Traffic Report's Memory Needs

Return to Table of Contents