Squid Report Errors

[Wytze van der Raay]

On Mon, Apr 07, 2003 at 08:17:57PM +0200, bbr7130 at netscape.net wrote:
> $ lr_run lr_log2report combined < \
>  /var/log/squid/access.log > ~/report.txt
> 
> Get the following errors for what appears to be every line processed:
> 
> The invalid "CLF" message seems to imply that there are CR/LF's in the log file but it appears clean when I open it with vi.

CLF is not a spelling error in the Lire software, but stands for
Common Logfile Format, a logfile format produced by many web servers.
Squid can emulate this format if configured to do so
("emulate_httpd_log on" in the squid configuration file),
but the default is to generate its own log format.
That is what you have, judging from:

> all combined lr_tag-20030407131139-10462 combined2dlf warning parse_common invalid CLF line '1048387050.319    229 10.200.1.90 TCP_MISS/302 614 GET http://www.code3.net/AffiliateWiz/affiliatewiz.asp? - DIRECT/207.212.194.6 text/html'

You can analyze this with Lire using the "squid" service, e.g.:

$ lr_run lr_log2report squid < \
  /var/log/squid/access.log > ~/report.txt

Hope this helps!
-- wytze

-- 
To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
questions-request at logreport.org