W3C Extented Log Format

[Poul-Henning Kamp]

In message <33afbbe70710231325u33770c1fs20627e55b8294e83 at mail.gmail.com>, "Cale
b Anthony" writes:

>s-ip (server ip)
>s-port (server port)

We don't log these right now, but we can do that relatively easily,
they need to go into the SessionOpen log record.

Open a ticket in our track record about this.

>cs-bytes (client to server bytes)

header or body (or both ?) bytes ?

Right now we don't support client to server bytes any other way than
during pipe processing, so we don't even count this number.

Cecilie is working on POST in the pass code, so that would give us
a number to put here.

>time-taken (time the action took in milliseconds)

Do they say where this should be measured exactly ?  We have four
timestamps you can choose from:

	connection open
	request received
	response ready
	response sent

and they're all represented in the ReqEnd record somehow.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.