now,my logformat is like the following,and the squid send a
X-Forwarded-For header,this is the snort dump package info.but in my
log file ,can't get real ip?I only reload the httpd. how can I do?
------------------------------------
75 69 64 2F 32 2E 35 2E 53 54 41 42 4C 45 31 30 uid/2.5.STABLE10
29 0D 0A 58 2D 46 6F 72 77 61 72 64 65 64 2D 46 )..X-Forwarded-F
6F 72 3A 20 32 32 32 2E 36 35 2E 31 30 36 2E 31 or: 222.65.106.1
31 39 0D 0A 43 61 63 68 65 2D 43 6F 6E 74 72 6F 19..Cache-Contro
-----------------------------------------
LogFormat "%{'X-Forwarded-For'}i %l %u %t \"%r\" %>s %b
\"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%{'X-Forwarded-For'}i %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
2005/9/1, Boyle Owen <[EMAIL PROTECTED]>:
> > -----Original Message-----
> > From: huang mingyou [mailto:[EMAIL PROTECTED]
> > Sent: Donnerstag, 1. September 2005 11:26
> > To: users@httpd.apache.org
> > Subject: [EMAIL PROTECTED] how to harmonize the squid reverse
> > proxy and the
> > apache log .
> >
> >
> > hello,list.
> > Ours web server behind on some squid server.so when we look
> > the Apache log,the host ip is the squid's ip,no the real client ip,I
> > want get the real client ip in the log file.how can I do?change the
> > squid configure file or the Apache configure file ?please help me.
>
> The apache "%h" identifier logs the actual IP address of the source of the
> request. As you see, that is now the squid proxy. To get the real client IP,
> you need:
>
> 1) Squid must pass this in an additional header like: HTTP_X_FORWARDED_FOR
> 2) You must then log this like: %{'HTTP_X_FORWARDED_FOR'}i
>
> Rgds,
> Owen Boyle
> Disclaimer: Any disclaimer attached to this message may be ignored.
>
>
>
> >
> > --
> > hmy
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP
> > Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > " from the digest: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> Diese E-mail ist eine private und persönliche Kommunikation. Sie hat keinen
> Bezug zur Börsen- bzw. Geschäftstätigkeit der SWX Gruppe. This e-mail is of a
> private and personal nature. It is not related to the exchange or business
> activities of the SWX Group. Le présent e-mail est un message privé et
> personnel, sans rapport avec l'activité boursière du Groupe SWX.
>
>
> This message is for the named person's use only. It may contain confidential,
> proprietary or legally privileged information. No confidentiality or
> privilege is waived or lost by any mistransmission. If you receive this
> message in error, please notify the sender urgently and then immediately
> delete the message and any copies of it from your system. Please also
> immediately destroy any hardcopies of the message. You must not, directly or
> indirectly, use, disclose, distribute, print, or copy any part of this
> message if you are not the intended recipient. The sender's company reserves
> the right to monitor all e-mail communications through their networks. Any
> views expressed in this message are those of the individual sender, except
> where the message states otherwise and the sender is authorised to state them
> to be the views of the sender's company.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> " from the digest: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
--
hmy
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
