> Here's my proposal for a new logfile format:
>
> host rfc931 authuser [DD/Mon/YYYY:hh:mm:ss] ``request'' ddd bbbb
Are those supposed to be separate single quotes around request or
are they supposed to be doublequote characters (e.g. "request") and
were changed by emacs latex mode? I prefer doublequote characters.
The rest looks good to me.
> The only remaining thing I haven't changed is to make the timezone GMT.
> Comments?
I prefer local time, myself, as its extremely rare that someone would
need to compare stats across time zones and what I usually look for in
my stats is what local time is best for system changes.
To put it another way, if it's GMT then every analyzer will either have
to stick with GMT format (not user-friendly) or convert each log entry's
timestamp to localtime (a non-portable bit of code).
...Roy Fielding ICS Grad Student, University of California, Irvine USA
(fielding@ics.uci.edu)