apache学习六-log

小鱼儿 2022-07-15 10:11 98阅读 0赞

1、log种类  
通用log格式（Common Log Format）  
组合log格式（Combined Log Format）（一般用这个）  
如下：  
    LogFormat "%h %l %u %t \\"%r\\" %>s %b \\"%\{Referer\}i\\" \\"%\{User-Agent\}i\\"" combined  
    LogFormat "%h %l %u %t \\"%r\\" %>s %b" common  
到httpd-vhosts.conf把common修改为combined即可  
\[root@python extra\]\# vi httpd-vhosts.conf  
<VirtualHost \*:80>  
    ServerAdmin 1098331428@qq.com  
    DocumentRoot "/web/html/www"  
    ServerName www.wolf.com  
    ServerAlias wolf.com  
    ErrorLog "logs/www-error\_log"  
    CustomLog "logs/www-access\_log" combined  
</VirtualHost>  
<VirtualHost \*:80>  
    ServerAdmin 1098331428@qq.com  
    DocumentRoot "/web/html/blog"  
    ServerName blog.wolf.com  
    ErrorLog "logs/blog-error\_log"  
    CustomLog "logs/blog-access\_log" common  
</VirtualHost>  
<VirtualHost \*:90>  
    ServerAdmin 1098331428@qq.com  
    DocumentRoot "/web/html/bbs"  
    ServerName bbs.wolf.com  
    ErrorLog "logs/bbs-error\_log"  
    CustomLog "logs/bbs-access\_log" common  
</VirtualHost>  
  
  
2、log轮巡  
log会逐渐变大，不方便查看和使用  
\[root@python logs\]\# ll  
total 36  
\-rw-r--r-- 1 root   root 2401 Nov  3 23:54 access\_log  
\-rw-r--r-- 1 root   root  584 Nov  6 23:23 bbs-access\_log  
\-rw-r--r-- 1 root   root  350 Nov  6 23:05 bbs-error\_log  
\-rw-r--r-- 1 root   root  724 Nov  6 23:23 blog-access\_log  
\-rw-r--r-- 1 root   root  354 Nov  6 23:05 blog-error\_log  
srwx------ 1 daemon root    0 Nov  3 22:21 cgisock.24365  
srwx------ 1 daemon root    0 Nov  8 03:06 cgisock.24709  
\-rw-r--r-- 1 root   root 3517 Nov  8 03:06 error\_log  
\-rw-r--r-- 1 root   root    6 Nov  8 03:06 httpd.pid  
\-rw-r--r-- 1 root   root 2101 Nov  6 23:23 www-access\_log  
\-rw-r--r-- 1 root   root 2482 Nov  6 23:21 www-error\_log  
  
  
轮巡检工具  
rotatelog  
cronolog  
  
  
cronolog下载安装  
wget http://down1.chinaunix.net/distfiles/cronolog-1.6.2.tar.gz  
tar -zxvf cronolog-1.6.2.tar.gz   
cd cronolog-1.6.2/  
./configure   
make  
make install  
\[root@python cronolog-1.6.2\]\# ll /usr/local/sbin/cronolog   
\-rwxr-xr-x 1 root root 48619 Nov 12 18:42 /usr/local/sbin/cronolog  
  
  
cronolog日志轮询配置  
  
  
ErrorLog "|/usr/local/sbin/cronolog  /soft/apache/logs/error\_bbs\_%Y%m%d.log"  
CustomLog "|/usr/local/sbin/cronolog  /soft/apache/logs/access\_bbs\_%Y%m%d.log" combined  
  
  
修改  
<VirtualHost \*:80>  
    ServerAdmin 1098331428@qq.com  
    DocumentRoot "/web/html/www"  
    ServerName www.wolf.com  
    ServerAlias wolf.com  
    ErrorLog "logs/www-error\_log"  
    CustomLog "logs/www-access\_log" common  
</VirtualHost>  
<VirtualHost \*:80>  
    ServerAdmin 1098331428@qq.com  
    DocumentRoot "/web/html/blog"  
    ServerName blog.wolf.com  
    ErrorLog "logs/blog-error\_log"  
    CustomLog "logs/blog-access\_log" common  
</VirtualHost>  
<VirtualHost \*:80>  
    ServerAdmin 1098331428@qq.com  
    DocumentRoot "/web/html/bbs"  
    ServerName bbs.wolf.com  
    ErrorLog "logs/bbs-error\_log"  
    CustomLog "|/usr/local/sbin/cronolog  /soft/apache/logs/access\_bbs\_%Y%m%d.log" combined  
</VirtualHost>  
  
  
\[root@python extra\]\# ../../bin/apachectl -t  
Syntax OK  
\[root@python extra\]\# ../../bin/apachectl graceful  
\[root@python extra\]\# lsof -i:80  
COMMAND  PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME  
httpd   2281   root    4u  IPv6  31178      0t0  TCP \*:http (LISTEN)  
httpd   2284 daemon    4u  IPv6  31178      0t0  TCP \*:http (LISTEN)  
httpd   2285 daemon    4u  IPv6  31178      0t0  TCP \*:http (LISTEN)  
  
  
\[root@python logs\]\# ll  
total 44  
\-rw-r--r-- 1 root   root  267 Nov 12 19:17 access\_bbs\_20161112.log  
\-rw-r--r-- 1 root   root 2483 Nov 12 18:38 access\_log  
\-rw-r--r-- 1 root   root  584 Nov  6 23:23 bbs-access\_log  
\-rw-r--r-- 1 root   root  350 Nov  6 23:05 bbs-error\_log  
\-rw-r--r-- 1 root   root  806 Nov 12 18:38 blog-access\_log  
\-rw-r--r-- 1 root   root  459 Nov 12 18:38 blog-error\_log  
srwx------ 1 daemon root    0 Nov 12 19:16 cgisock.2281  
srwx------ 1 daemon root    0 Nov  3 22:21 cgisock.24365  
\-rw-r--r-- 1 root   root 5692 Nov 12 19:16 error\_log  
\-rw-r--r-- 1 root   root    5 Nov 12 19:16 httpd.pid  
\-rw-r--r-- 1 root   root 2347 Nov 12 18:38 www-access\_log  
\-rw-r--r-- 1 root   root 2794 Nov 12 18:38 www-error\_log  
\[root@python logs\]\# cat access\_bbs\_20161112.log   
192.168.3.41 - - \[12/Nov/2016:19:17:08 +0800\] "GET / HTTP/1.1" 200 20 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0E; .NET4.0C; InfoPath.3)"  
  
  
rotatelog apache自带的命令（新版本中没有）  
  
  
ErrorLog "|/usr/local/apache1.3.33/bin/rotatelogs /logs/%Y%m%d.error.log 604800"  
CustomLog "|/application/apache/bin/rotatelogs /logs/access\_www\_%Y%m%d.log 86400 480" combined  
CustomLog "|/application/apache/bin/rotatelogs /logs/access\_www\_%Y%m%d.log 86400" combined  
  
  
  
  
3、分析log  
\[root@python logs\]\# awk '\{print $1\}' access\_bbs\_20161112.log |sort|uniq -c |sort -rn -k1|head -10  
21 192.168.3.41  
\[root@python logs\]\# awk '\{++S\[$1\]\} END \{for (key in S) print S\[key\],key\}' access\_bbs\_20161112.log  
21 192.168.3.41  
\[root@python logs\]\# awk '\{++S\[$1\]\} END \{for (key in S) print S\[key\],key\}' access\_bbs\_20161112.log |sort -rn -k1|head -10  
21 192.168.3.41  
  
  
4、隐藏版本 （源码中改，然后才configure make make install）  
\[root@python include\]\# pwd  
/soft/apache/include  
\[root@python include\]\# cat ap\_release.h   
  
  
\#define AP\_SERVER\_BASEVENDOR "Apache Software Foundation"  
\#define AP\_SERVER\_BASEPROJECT "Apache HTTP Server"  
\#define AP\_SERVER\_BASEPRODUCT "Apache"  
  
  
\#define AP\_SERVER\_MAJORVERSION\_NUMBER 2  
\#define AP\_SERVER\_MINORVERSION\_NUMBER 2  
\#define AP\_SERVER\_PATCHLEVEL\_NUMBER   31  
\#define AP\_SERVER\_DEVBUILD\_BOOLEAN    0  
  
  
\[root@python include\]\# cat os.h  
\#define PLATFORM "Unix"  
  
  
5、隐藏版本号  
把Full改为Prod  
\[root@python extra\]\# vi httpd-default.conf  
\# ServerTokens  
\# This directive configures what you return as the Server HTTP response  
\# Header. The default is 'Full' which sends information about the OS-Type  
\# and compiled in modules.  
\# Set to one of:  Full | OS | Minor | Minimal | Major | Prod  
\# where Full conveys the most information, and Prod the least.  
\#  
ServerTokens Prod  
  
  
主配置文件里启用  
\# Various default settings  
Include conf/extra/httpd-default.conf  
  
  
\[root@python conf\]\# curl -I http://bbs.wolf.com  
HTTP/1.1 200 OK  
Date: Sat, 12 Nov 2016 11:54:12 GMT  
Server: Apache/2.2.31 (Unix)  
Last-Modified: Sun, 06 Nov 2016 14:47:39 GMT  
ETag: "23b6535-14-540a2fd214556"  
Accept-Ranges: bytes  
Content-Length: 20  
Content-Type: text/html  
  
  
\[root@python conf\]\# ../bin/  
ab            apxs          dbmmanage     htdbm         htpasswd      httxt2dbm     rotatelogs      
apachectl     checkgid      htcacheclean  htdigest      httpd         logresolve      
\[root@python conf\]\# ../bin/apachectl -t  
Syntax OK  
\[root@python conf\]\# ../bin/apachectl graceful  
\[root@python conf\]\# curl -I http://bbs.wolf.com  
HTTP/1.1 200 OK  
Date: Sat, 12 Nov 2016 11:54:35 GMT  
Server: Apache  
Last-Modified: Sun, 06 Nov 2016 14:47:39 GMT  
ETag: "23b6535-14-540a2fd214556"  
Accept-Ranges: bytes  
Content-Length: 20  
Content-Type: text/html  
  
  
\[root@python conf\]\#