ATS自定义日志中的各字段解读
<Format = "%<cqtq> %<ttms> %<pssc> %<sssc> [%<cqtt>] %<{X-Forwarded-For}cqh> \"%<cqtx>\" %<psql> \"%<pqsi>\" %<crc>:%<phr> %<{Referer}cqh> \"%<{User-Agent}cqh>\" %<psct>"/>
實例如下:
1432194201.810 8945 200 200 ?[15:43:21] 211.143.88.220 "GET http://111.13.140.12:80/youku/697814A886D39744A94514B27/03000208005506A3413AA803BAF2B1552E0345-4545-BEED-FC67-17B76E3C0F6D.flv HTTP/1.1" 12979938 "*Not IP address [0]*" TCP_MEM_HIT:NONE http://v.youku.com/v_show/id_XOTEzMjM1Njgw.html?from=y1.3-idx-grid-1519-9909.86808-86807.3-1 "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Trident/4.0;)" video/x-flv
1432118160.693 348 200 200 [18:36:00] 10.10.110.142 "GET http://123.126.104.80:80/sohu/s26h23eab6/v1/TmwATmw7qKINgmNVqF16q6bV0esvD6sRPVcXNhWL5m47fFoGRMNiNw.mp4?k=zjXjSK&p=XZhuOp3AjfK&r=TmI20LscWOoCNLfcWOyXwmXAyBj&q=OpCBhW7IWJodRDbsfhASotE7ZDvOfhXOfJ1HfhAHfhysvmbcWJWXfGdtZhNSqD24WYoUZDJ&cip=221.220.19.171 HTTP/1.1" 1010003 "123.126.104.80" TCP_MISS:DIRECT http://tv.sohu.com/20140502/n399076828.shtml "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36" video/mp4
分解指示如下:
{HTTP header field name} cqh ?Logs the information in the requested field of the client request HTTP header
cqtq ?
The client request timestamp, with millisecond resolution,unix timestamp,單位是毫秒
ttms ?
The time Traffic Server spends processing the client request(處理該請求的總耗時,單位是毫秒,這個時間包括了ATS回源時間stms); the number of milliseconds between the time the client establishes the connection with Traffic Server and?the time Traffic Server sends the last byte of the response back to the client.
pssc ?
The HTTP response status code from Traffic Server to the client
sssc ?
The HTTP response status code from origin server to Traffic Server
cqtt ?
The client request timestamp. The time of the client request in the format hh:mm:ss, where hh is the two-digit hour in 24-hour format, mm is the two-digit minutes value,and ss is the 2-digit seconds value (for example, 16:01:19).
{X-Forwarded-For}cqh
X-Forwarded-For?header
cqtx?
The full HTTP client request text, minus headers; for example,GET http://www.company.com HTTP/1.0; In reverse proxy mode, Traffic Server logs the rewritten/mappedURL (according to the rules in remap.config), _not_ the pristine/unmapped URL.
psql?
The proxy response transfer length in Squid format (includes header and content length).
pqsi?
The proxy request server IP address (0 on cache hits and parent-ip for requests to parent proxies).
crc ?
The cache result code; specifies how the cache responded to the request (HIT, MISS, and so on).
phr ?
The proxy hierarchy route; the route Traffic Server used to retrieve the object.
{Referer}cqh ?
Referer header
{User-Agent}cqh ??
User-Agent header
psct?
The content type of the document from server response header: (for example, img/gif ).
更詳細的字段分析參見下面的參考文獻[1].
[1].http://trafficserver.readthedocs.org/en/latest/admin/event-logging-formats.en.html
總結(jié)
以上是生活随笔為你收集整理的ATS自定义日志中的各字段解读的全部內(nèi)容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: 在Ubuntu 14.04 64bit上
- 下一篇: 趣谈HTTP协议中的那些MIME hea