Table of Contents
Lire supports three different proxy log file formats allowing it to support a wide range of products.
This product uses a format derived from the W3C Extended Log Format which is defined at http://www.w3.org/TR/WD-logfile.html. Information about the way Microsoft Internet Security and Acceleration Server™ uses that format can be found on the product's website.
The format of
Lire can use the following fields of the format:
          date,
          time,
          c-ip,
          c-host,
          cs-username,
          c-agent,
          time-taken,
          r-ip,
          r-host,
          sc-status,
          sc-protocol,
          sc-operation,
          s-object-source,
          sc-operation,
          rule#1,
          rule#2 and
          cs-mime-type. The other fields
          will be ignored.
        
Example 14.1. Microsoft Internet Security and Acceleration Server™ Log Sample
#Software: Microsoft(R) Internet Security and Acceleration Server 2000
#Version: 1.0
#Date: 2002-01-16 07:00:01
#Fields: c-ip	cs-username	c-agent	date	time	s-computername \
    cs-referred	r-host	r-ip	r-port	time-taken	cs-bytes\
    sc-bytes cs-protocol	s-operation	cs-uri s-object-source	\
    sc-status
10.0.0.1	anonymous	Mozilla/4.0 (compatible; MSIE 5.0; Win32)\
    2002-01-16	07:00:01	GRO1SYX01	-	-	-	-\
    -	155	2569	-	GET	-	-	200 \
10.0.0.1	anonymous	Outlook Express/5.0 \
    (MSIE 5.0; Windows 98; DigExt)	2002-01-16	07:00:04 \
    GRO1SYX01	-	1.example.com