oh,I change the %{'X-Forwarded-For'}i to %{X-Forwarded-For}i .now
can work correct.
2005/9/1, huang mingyou <[EMAIL PROTECTED]>:
> now,my logformat is like the following,and the squid send a
> X-Forwarded-For header,this is the snort dump package info.but in my
> log file ,can't get real ip?I only reload the httpd. how can I do?
> ------------------------------------
> 75 69 64 2F 32 2E 35 2E 53 54 41 42 4C 45 31 30 uid/2.5.STABLE10
> 29 0D 0A 58 2D 46 6F 72 77 61 72 64 65 64 2D 46 )..X-Forwarded-F
> 6F 72 3A 20 32 32 32 2E 36 35 2E 31 30 36 2E 31 or: 222.65.106.1
> 31 39 0D 0A 43 61 63 68 65 2D 43 6F 6E 74 72 6F 19..Cache-Contro
>
>
> -----------------------------------------
> LogFormat "%{'X-Forwarded-For'}i %l %u %t \"%r\" %>s %b
> \"%{Referer}i\" \"%{User-Agent}i\"" combined
> LogFormat "%{'X-Forwarded-For'}i %l %u %t \"%r\" %>s %b" common
> LogFormat "%{Referer}i -> %U" referer
> LogFormat "%{User-agent}i" agent
>
>
> 2005/9/1, Boyle Owen <[EMAIL PROTECTED]>:
> > > -----Original Message-----
> > > From: huang mingyou [mailto:[EMAIL PROTECTED]
> > > Sent: Donnerstag, 1. September 2005 11:26
> > > To: users@httpd.apache.org
> > > Subject: [EMAIL PROTECTED] how to harmonize the squid reverse
> > > proxy and the
> > > apache log .
> > >
> > >
> > > hello,list.
> > > Ours web server behind on some squid server.so when we look
> > > the Apache log,the host ip is the squid's ip,no the real client ip,I
> > > want get the real client ip in the log file.how can I do?change the
> > > squid configure file or the Apache configure file ?please help me.
> >
> > The apache "%h" identifier logs the actual IP address of the source of the
> > request. As you see, that is now the squid proxy. To get the real client
> > IP, you need:
> >
> > 1) Squid must pass this in an additional header like: HTTP_X_FORWARDED_FOR
> > 2) You must then log this like: %{'HTTP_X_FORWARDED_FOR'}i
> >
> > Rgds,
> > Owen Boyle
> > Disclaimer: Any disclaimer attached to this message may be ignored.
> >
> >
> >
> > >
> > > --
> > > hmy
> > >
> > > ---------------------------------------------------------------------
> > > The official User-To-User support forum of the Apache HTTP
> > > Server Project.
> > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > " from the digest: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > >
> > >
> > Diese E-mail ist eine private und persönliche Kommunikation. Sie hat keinen
> > Bezug zur Börsen- bzw. Geschäftstätigkeit der SWX Gruppe. This e-mail is of
> > a private and personal nature. It is not related to the exchange or
> > business activities of the SWX Group. Le présent e-mail est un message
> > privé et personnel, sans rapport avec l'activité boursière du Groupe SWX.
> >
> >
> > This message is for the named person's use only. It may contain
> > confidential, proprietary or legally privileged information. No
> > confidentiality or privilege is waived or lost by any mistransmission. If
> > you receive this message in error, please notify the sender urgently and
> > then immediately delete the message and any copies of it from your system.
> > Please also immediately destroy any hardcopies of the message. You must
> > not, directly or indirectly, use, disclose, distribute, print, or copy any
> > part of this message if you are not the intended recipient. The sender's
> > company reserves the right to monitor all e-mail communications through
> > their networks. Any views expressed in this message are those of the
> > individual sender, except where the message states otherwise and the sender
> > is authorised to state them to be the views of the sender's company.
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > " from the digest: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
>
> --
> hmy
>
--
hmy
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
