mirror of
https://github.com/zeek/zeek.git
synced 2025-10-11 11:08:20 +00:00
7c2307e079
This changes the HTTP log format slightly but shouldn't mess up anything that anyone was doing because the old "filename" field was never actually filled out. Tests are updated as well.
58 lines
9 KiB
Text
58 lines
9 KiB
Text
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path http
|
|
#open 2016-06-15-05-41-23
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p trans_depth method host uri referrer version user_agent request_body_len response_body_len status_code status_msg info_code info_msg tags username password proxied orig_fuids orig_filenames orig_mime_types resp_fuids resp_filenames resp_mime_types
|
|
#types time string addr port addr port count string string string string string string count count count string count string set[enum] string string set[string] vector[string] vector[string] vector[string] vector[string] vector[string] vector[string]
|
|
1354328870.191989 CXWv6p3arKYeMETxOg 128.2.6.136 46562 173.194.75.103 80 1 OPTIONS www.google.com * - 1.1 - 0 962 405 Method Not Allowed - - (empty) - - - - - - FKgccv1sOsIPuN3b73 - text/html
|
|
1354328874.237327 CjhGID4nQcgTWjvg4c 128.2.6.136 46563 173.194.75.103 80 1 OPTIONS www.google.com (empty) - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FWUdF12OgqGLhf3NPl - text/html
|
|
1354328874.299063 CCvvfg3TEfuqmmG4bh 128.2.6.136 46564 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FrYoRN2EwpZyXbyvF8 - text/html
|
|
1354328874.342591 CsRx2w45OKnoww6xl4 128.2.6.136 46565 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FJPouz1lbXUsa4Ef1 - text/html
|
|
1354328874.364020 CRJuHdVW0XPVINV8a 128.2.6.136 46566 173.194.75.103 80 1 GET www.google.com / - 1.1 - 0 43911 200 OK - - (empty) - - - - - - FbONWS332vB7QP1sDi - text/html
|
|
1354328878.470424 CPbrpk1qSsw6ESzHV4 128.2.6.136 46567 173.194.75.103 80 1 GET www.google.com / - 1.1 - 0 43983 200 OK - - (empty) - - - - - - Fw8xGD2taqNAOVvI88 - text/html
|
|
1354328882.575456 C6pKV8GSxOnSLghOa 128.2.6.136 46568 173.194.75.103 80 1 GET www.google.com /HTTP/1.1 - 1.0 - 0 1207 403 Forbidden - - (empty) - - - - - - FdEQPY3H4Z608y5yq1 - text/html
|
|
1354328882.928027 CIPOse170MGiRM1Qf4 128.2.6.136 46569 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FcNjaW3kDUju84cG3 - text/html
|
|
1354328882.968948 C7XEbhP654jzLoe3a 128.2.6.136 46570 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - Fe8v8c49yLvORp3zva - text/html
|
|
1354328882.990373 CJ3xTn1c4Zw9TmAE05 128.2.6.136 46571 173.194.75.103 80 1 GET www.google.com / - 1.1 - 0 43913 200 OK - - (empty) - - - - - - FAbDo7c8yz5wducYb - text/html
|
|
1354328887.114613 CMXxB5GvmoxJFXdTa 128.2.6.136 46572 173.194.75.103 80 1 - - - - 1.1 - 0 961 405 Method Not Allowed - - (empty) - - - - - - F7zifu3d5nGrdGffO4 - text/html
|
|
1354328891.161077 Caby8b1slFea8xwSmb 128.2.6.136 46573 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FNf9mc2b0BWWP1UxWe - text/html
|
|
1354328891.204740 Che1bq3i2rO3KD1Syg 128.2.6.136 46574 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FG2K813sKEZvZ2TNY4 - text/html
|
|
1354328891.245592 C3SfNE4BWaU4aSuwkc 128.2.6.136 46575 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FOOeqs4Vg0Zs3rcVYi - text/html
|
|
1354328891.287655 CEle3f3zno26fFZkrh 128.2.6.136 46576 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - F2wfYn1yFdeOeHFYA8 - text/html
|
|
1354328891.309065 CwSkQu4eWZCH7OONC1 128.2.6.136 46577 173.194.75.103 80 1 CCM_POST www.google.com / - 1.1 - 0 963 405 Method Not Allowed - - (empty) - - - - - - F1d9bG11AdUoYIAPna - text/html
|
|
1354328895.355012 CfTOmO0HKorjr8Zp7 128.2.6.136 46578 173.194.75.103 80 1 CCM_POST www.google.com /HTTP/1.1 - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - F73Xpt400aDAjp1tOj - text/html
|
|
1354328895.416133 CzA03V1VcgagLjnO92 128.2.6.136 46579 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FANgwp2fEJblWfGtqk - text/html
|
|
1354328895.459490 CyAhVIzHqb7t7kv28 128.2.6.136 46580 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FUelQv4zC3B2JEWwQ6 - text/html
|
|
1354328895.480865 Cab0vO1xNYSS2hJkle 128.2.6.136 46581 173.194.75.103 80 1 CCM_POST www.google.com / - 1.1 - 0 963 405 Method Not Allowed - - (empty) - - - - - - FodlEg40uUijFetJb9 - text/html
|
|
1354328899.526682 Cx2FqO23omNawSNrxj 128.2.6.136 46582 173.194.75.103 80 1 CONNECT www.google.com / - 1.1 - 0 925 400 Bad Request - - (empty) - - - - - - FgQlB81dSyLHN5T8Q4 - text/html
|
|
1354328903.572533 Cx3C534wEyF3OvvcQe 128.2.6.136 46583 173.194.75.103 80 1 CONNECT www.google.com /HTTP/1.1 - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FW2UCD2e0jxAndsTK3 - text/html
|
|
1354328903.634196 CkDsfG2YIeWJmXWNWj 128.2.6.136 46584 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FKANAL2sLvMgJdaEKa - text/html
|
|
1354328903.676395 CUKS0W3HFYOnBqSE5e 128.2.6.136 46585 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FNRuYy4eahAmiehFvd - text/html
|
|
1354328903.697693 CRrfvP2lalMAYOCLhj 128.2.6.136 46586 173.194.75.103 80 1 CONNECT www.google.com / - 1.1 - 0 925 400 Bad Request - - (empty) - - - - - - FAVGIL2N6x9nLyfGHh - text/html
|
|
1354328907.743696 Cn78a440HlxuyZKs6f 128.2.6.136 46587 173.194.75.103 80 1 TRACE www.google.com / - 1.1 - 0 960 405 Method Not Allowed - - (empty) - - - - - - FKbiICMAvCsO6CFjk - text/html
|
|
1354328911.790590 CUof3F2yAIid8QS3dk 128.2.6.136 46588 173.194.75.103 80 1 TRACE www.google.com /HTTP/1.1 - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FD5riIpYe5BLR0aok - text/html
|
|
1354328911.853464 CojBOU3CXcLHl1r6x1 128.2.6.136 46589 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FUzHwP1gT2UJYnUpUi - text/html
|
|
1354328911.897044 CJzVQRGJrX6V15ik7 128.2.6.136 46590 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FfLe59279TLFl2hHKc - text/html
|
|
1354328911.918511 ClAbxY1nmdjCuo0Le2 128.2.6.136 46591 173.194.75.103 80 1 TRACE www.google.com / - 1.1 - 0 960 405 Method Not Allowed - - (empty) - - - - - - FQrvtP3qpKeKPxn5Gf - text/html
|
|
1354328915.964678 CwG0BF1VXE0gWgs78 128.2.6.136 46592 173.194.75.103 80 1 DELETE www.google.com / - 1.1 - 0 961 405 Method Not Allowed - - (empty) - - - - - - Fs5qiV3XoBOExKLdi4 - text/html
|
|
1354328920.010458 CisNaL1Cm73CiNOmcg 128.2.6.136 46593 173.194.75.103 80 1 DELETE www.google.com /HTTP/1.1 - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FpkucFbcGcM4CNkZf - text/html
|
|
1354328920.072101 CBQnJn22qN8TOeeZil 128.2.6.136 46594 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FBu6A04t7ZjbY0dCi8 - text/html
|
|
1354328920.114526 CbEsuD3dgDDngdlbKf 128.2.6.136 46595 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - Fk7Se84fbLvbZEfBCd - text/html
|
|
1354328920.136714 Cktvtw2VqwbTG0OgWk 128.2.6.136 46596 173.194.75.103 80 1 DELETE www.google.com / - 1.1 - 0 961 405 Method Not Allowed - - (empty) - - - - - - FNb8ZY2Zvw0MpF1qU4 - text/html
|
|
1354328924.183211 CKfF8L3XSsgT2WYDN 128.2.6.136 46597 173.194.75.103 80 1 PUT www.google.com / - 1.0 - 0 934 411 Length Required - - (empty) - - - - - - Fo23U03XCMamm7QQWe - text/html
|
|
1354328924.224567 CHrnr1115j0JRSXjG6 128.2.6.136 46598 173.194.75.103 80 1 PUT www.google.com /HTTP/1.1 - 1.0 - 0 934 411 Length Required - - (empty) - - - - - - FqyVeZqSV8Tz7hfT1 - text/html
|
|
1354328924.287402 Cnkr172qPtDAaK7Xd 128.2.6.136 46599 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - Ft15j5I9xSpfcA7Fh - text/html
|
|
1354328924.328257 CcxZj6188NwHGl3a16 128.2.6.136 46600 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FyF5ac1kxwCDvXZKz7 - text/html
|
|
1354328924.350343 CUqYZc2XzbfnZKbgT 128.2.6.136 46601 173.194.75.103 80 1 PUT www.google.com / - 1.0 - 0 934 411 Length Required - - (empty) - - - - - - FuGiTK15gnR7f8Uti2 - text/html
|
|
1354328924.391728 CVdnYXVEtNT1lQVL6 128.2.6.136 46602 173.194.75.103 80 1 POST www.google.com / - 1.0 - 0 934 411 Length Required - - (empty) - - - - - - F93zuy2MGUDDPwg0xl - text/html
|
|
1354328924.433150 CbNmy32YFt3gdIjV8 128.2.6.136 46603 173.194.75.103 80 1 POST www.google.com /HTTP/1.1 - 1.0 - 0 934 411 Length Required - - (empty) - - - - - - FRJvy31aqXlFemaBfc - text/html
|
|
1354328924.496732 COTmF91mGWcb4zV7W5 128.2.6.136 46604 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - Fcnnrf1A8AgOFzLHM - text/html
|
|
1354328924.537671 CuChlg202P8sUFuXrg 128.2.6.136 46605 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FI3I73110YtFWCuaG3 - text/html
|
|
1354328924.559704 CZTTFm2GrMAs8leAyl 128.2.6.136 46606 173.194.75.103 80 1 HEAD www.google.com / - 1.1 - 0 0 200 OK - - (empty) - - - - - - - - -
|
|
1354328928.625437 CV23rC3tBHfPhMUPtf 128.2.6.136 46607 173.194.75.103 80 1 HEAD www.google.com / - 1.1 - 0 0 200 OK - - (empty) - - - - - - - - -
|
|
1354328932.692706 CkaPGx2P0Y3W5aHVFk 128.2.6.136 46608 173.194.75.103 80 1 HEAD www.google.com /HTTP/1.1 - 1.0 - 0 0 400 Bad Request - - (empty) - - - - - - - - -
|
|
1354328932.754657 CY93mM3aViMiLKuSw3 128.2.6.136 46609 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FaVAsywxxOtGAzel8 - text/html
|
|
1354328932.796568 CXgISq6dA2DVPzqp9 128.2.6.136 46610 173.194.75.103 80 1 - - - - 1.0 - 0 925 400 Bad Request - - (empty) - - - - - - FmzgEKnyfPnyZqmh - text/html
|
|
#close 2016-06-15-05-41-23
|