Topic: Log File Discrepencies

[geffers]

Apache 2.2.22

Folks,

I may be making something here too complicated but a friend downloaded a largish video file via my very basic web server.

Trying to interpret the data I am getting different figures and would appreciate advice as to which one is correct or am I reading it wrongly.

carole [10/Nov/2013:17:55:21 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 2879608
carole [10/Nov/2013:17:56:07 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 1902255
carole [10/Nov/2013:18:11:41 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 206 357
carole [10/Nov/2013:18:11:49 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 206 5317289
carole [10/Nov/2013:18:16:38 +0000] "GET /cwgl/files/vidlink/videos/vid01.ts.mpg HTTP/1.1" 200 1834235652

200 totals = 1839017515

File properties on Ubuntu 2.0 GB (1,971,322,880 bytes)


server-status
1-0 31921 0/3/3 _ 82.64 57740 19048263 0.0 1880.00 1880.00 ip72-197-68-158.sd.sd.cox.net 3lanes NULL

The other_vhost_access file says 1839017515
Ubuntu file properties says 2.0 GB (1,971,322,880 bytes)
Apache server-status says 1880.00

Geffers

[maba]

Assuming that the web server is Apache, this would be read like this

source machine = carole
time stamp

The get request as sent by the browser.
After the HTTP/1.1 comes the status code from Apache.

200 means "OK"
206 means "partial content"
see http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

so if these are really all the entries related to this one download, it would mean

1844335161 Bytes. This is still incomplete, but thats how you would read the logfile. How the requests are sent, depends on your browser. For example if you look at the Firefox plugin "DownThemAll", this by default uses 4 independent slots. Other browsers or media players behave differently. When you enable "combined" logging, you will see some more details.

Regards
Maba