Host Header Logging into the plaintext file
This feature is the simplest way to track HTTP requests which packets match at least one rule listed in the filter. To use Host Header Logging into the plaintext file, you should specify a Filename template for the logfiles. Every filter must have a unique Filename Template because it has own independent Host Header Collector.
Each line of the logfile contains information about one captured HTTP Request, for example:
2003-11-26 18:39:13 4 11 1 GET www.w3.org 192.168.4.5:1410 216.16.16.105:80 1218 24609 2003-11-26 18:39:19 4 11 1 GET www.w3.org 192.168.4.5:1411 216.16.16.105:80 748 12006 2003-11-26 18:39:31 4 11 1 GET www.w3.org 192.168.4.5:1412 216.16.16.105:80 718 12060 |
Where:
|
Column |
Description |
|
1 |
Date when this record appeared in the logfile |
|
2 |
Time when this record appeared in the logfile |
|
3 |
Filter Id |
|
4 |
|
|
5 |
|
|
6 |
Method of the HTTP request |
|
7 |
Host name |
|
8 |
IP address and TCP port number of a client |
|
9 |
IP address and TCP port number of a server |
|
10 |
Number of bytes transferred from the client to the server |
|
11 |
Number of bytes transferred from the server to the client |