FileMaker Pro Notes
These Logs come in two styles, Brief and Detailed. Their format is fixed so all you need to do is select the correct style from the Log Format popup and you’re ready to go.
A log entry in the Brief format looks similar to:
5/14/00 3:45:00 PM 207.94.140.111 /images/blueberry.gif
It contains the date and time of the transaction, the IP address of the visitor and the URL requested.
A log entry in the Detailed format looks similar to:
5/14/00 3:45:00 PM 207.94.140.111 /images/blueberry.gif
5/14/00 3:45:00 PM Got search argument.
5/14/00 3:45:00 PM -db=bumperStumper.db&cart=289
5/14/00 3:45:00 PM Sending reply. Elapsed time: 351 millisec.
In addition to containing the same information as the Brief format, it also includes transfer time and search argument information.
Microsoft IIS Notes
The MS IIS log format is not fixed; field order may be changed and fields may or may not be present. This log contains a secret note (called a directive) that tells what fields it contains and their order. It may look a lot like:
#Fields: date time c-ip cs-method cs-uri-stem cs(Referer) sc-status sc-bytes time-taken cs(User-Agent)
Its entries look similar to:
2000-05-14 15:45:00 207.94.140.111 GET /images/blueberry.gif http://www.apple.de/ 200 5120 750 Mozilla/5.0+(Macintosh;+U;+PPC)
The following table shows examples of log field content and how each is referenced by TrafficReport and this format’s field names:
| TR Name |
Field Example |
Field Name |
| Date |
2000-05-14 or 5/14/00 |
DATE |
| Time |
15:45:00 |
TIME |
| Hostname |
207.94.140.111 |
C-IP |
| Method |
GET |
CS-METHOD |
| URL |
/images/blueberry.gif |
CS-URI-STEM |
| Referrer |
http://www.apple.de/ |
CS(REFERER) |
| Result |
200 |
SC-STATUS |
| Bytes Sent |
5120 |
SC-BYTES |
| Transfer Time |
750 [in milliseconds] |
TIME-TAKEN |
| Agent |
Mozilla/5.0 (Macintosh;U;PPC) |
CS(USER-AGENT) |
| SearchArgs |
?db=bumperStumper.db&cart-289 |
CS-URI-QUERY |
NCSA Notes
This is a generic format that is used by a number of different server software. Its entries look similar to:
207.94.140.111 - - [14/May/2000:15:45:00 -0100] "GET /images/blueberry.gif HTTP/1.0" 200 5120 "http://www.apple.de/" "Mozilla/5.0 (Macintosh; U; PPC)"
When you select NCSA from the Log Structure panel’s Log Format popup, TrafficReport automatically configures itself to understand the most common field layout for NCSA Logs. This log contains no secret note (called a directive) that tells what fields it contains and their order.
The following table shows examples of NCSA’s field content and how each is referenced by TrafficReport and this format’s fields:
| TR Name |
Field Example |
Field Name |
| Date |
[14/May/2000:15:45:00 -0100] |
[DATE/TIME] |
| Time |
[14/May/2000:15:45:00 -0100] |
[DATE/TIME] |
| Hostname |
207.94.140.111 |
HosTNAME |
| Method |
GET |
[METHOD/URL/P-ARGS/S-ARGS] |
| URL |
/images/blueberry.gif |
[METHOD/URL/P-ARGS/S-ARGS] |
| Referrer |
http://www.apple.de/ |
REFERRER |
| Result |
200 |
RESULTS_CODE |
| Bytes Sent |
5120 |
BYTES_SENT |
| Agent |
Mozilla/5.0 (Macintosh;U;PPC) |
AGENT |
| SearchArgs |
?db=bumperStumper.db&cart-289 |
[METHOD/URL/P-ARGS/S-ARGS] |
WebSTAR Common Notes
The WS Common log format is not fixed; field order may be changed and fields may or may not be present. This log contains a secret note (called a directive) that tells what fields it contains and their order. It may look a lot like:
!!LOG_FORMAT DATE TIME HosTNAME METHOD URL REFERER RESULT_CODE BYTES_SENT TIME_TAKEN AGENT PATH_ARGS SEARCH_ARGS
Its entries look similar to:
05/14/00 15:45:00 207.94.140.111 GET :images:blueberry.gif http://www.apple.de/ 200 5120 00:00:01 Mozilla/5.0 (Macintosh; U; PPC) $showcart ?db=bumperStumper.db&cart=289
The following table shows examples of log field content and how each is referenced by TrafficReport and this format’s field names:
| TR Name |
Field Example |
Field Name |
| Date |
05/14/00 |
DATE |
| Time |
15:45:00 |
TIME |
| Hostname |
207.94.140.111 |
HosTNAME |
| Method |
GET |
METHOD |
| URL |
/images/blueberry.gif |
URL |
| Referrer |
http://www.apple.de/ |
REFERRER |
| Result |
200 |
RESULT or RESULTS_CODE |
| Bytes Sent |
5120 |
BYTES_SENT |
| Transfer Time |
121 [sixtieths of a second] or 00:00:02 |
TRANSFER_TIME or TIME_TAKEN |
| Agent |
Mozilla/5.0 (Macintosh;U;PPC) |
AGENT |
| SearchArgs |
?db=bumperStumper.db&cart-289 |
SEARCH_ARGS |
WebSTAR Extended Notes
The WS Extended log format is not fixed; field order may be changed and fields may or may not be present. This log contains a secret note (called a directive) that tells what fields it contains and their order. It may look a lot like:
#Fields: DATE TIME CS-IP CS-METHOD CS-URI CS(REFERER) CS-STATUS BYTES TIME_TAKEN CS(USER-AGENT) CS-URI-STEM CS-URI-QUERY
Its entries look similar to:
2000-05-14 15:45:00 207.94.140.111 GET /images/blueberry.gif "http://www.apple.de/" 200 5120 00:00:02 "Mozilla/5.0 (Macintosh; U; PPC)" $showcart ?db=bumperStumper.db&cart=289
The following table shows examples of log field content and how each is referenced by TrafficReport and this format’s field names:
| TR Name |
Field Example |
Field Name |
| Date |
2000-05-14 or 5/14/00 |
DATE |
| Time |
15:45:00 |
TIME |
| Hostname |
207.94.140.111 |
C-DNS, C-IP or CS-IP |
| Method |
GET |
CS-METHOD |
| URL |
/images/blueberry.gif |
CS-URI |
| Referrer |
http://www.apple.de/ |
CS(REFERER) |
| Result |
200 |
CS-STATUS |
| Bytes Sent |
5120 |
BYTES |
| Transfer Time |
121 [sixtieths of a second] or 00:00:02 |
TIME-TAKEN |
| Agent |
Mozilla/5.0 (Macintosh;U;PPC) |
CS(USER-AGENT) |
| SearchArgs |
$showcart |
CS-URI-STEM |
| SearchArgs |
?db=bumperStumper.db&cart-289 |
CS-URI-QUERY |
