topic Re: Apache Linux 9 in Operating System - Linux

Apache Linux 9

Nobody's Hero — Wed, 17 Mar 2004 09:34:43 GMT

I am running RH9 with Apache. In the /var/log/httpd directory, I have an access_log file. It looks like:

111.111.11.1 - - [14/Mar/2004:08:38:46 -0500] "GET /thi_fac_acct_rpt.html HTTP/1.1" 200 19117

Is there any way that I can get Apache to tell me who 111.111.11.1 is? Can I get Apache to reflect a login id rather than IP?

10x
RPM

Re: Apache Linux 9

Paul Cross_1 — Wed, 17 Mar 2004 09:44:35 GMT

There used to be a directive in much older apache versions that did this. I don't think this exists anymore... You could easily script it, but this looks cool:

http://httpd.apache.org/docs-2.1/programs/logresolve.html

Re: Apache Linux 9

Claudio Cilloni — Wed, 17 Mar 2004 09:47:41 GMT

Apache doens't know the login id. It receives HTTP requests through TCP connection, and it knows only the remote IP address and port. That line means that a client from the ip address 111.111.11.1 asked for the file thi_fac_acct_rpt.html, and apache replied sending that file to the client.

Hope I'm not going wrong...

Ciao
Claudio

Re: Apache Linux 9

Paul Cross_1 — Wed, 17 Mar 2004 09:58:03 GMT

Maybe I wasn't sure what you meant... Are you trying to get IP to hostname info, or the name of the user?

The link I gave you is for resolving ip numbers to hostnames. If you are trying to get the userid, that would depend on how, if, when, you are doing user authentication.

-p

Re: Apache Linux 9

Claudio Cilloni — Wed, 17 Mar 2004 10:00:07 GMT

by the way... I remember it is possible to activate the name resolution of the ip address (but I don't remember how), so in the log file you will see the dns name corresponding to that ip. But this could cause apache to do a lot of queries to the dns service.
but this isn't the login id you asked for...

Ciao
Claudio