There are four distinct types of entries which differ in their structure. What is common to all of them are timestamp, sessionkey and type of action as the first three entries.
| <timestamp> | the UNIX time in seconds since 70/1/1 |
| <sessionkey> | the SessionId |
| <action> | a two-digit abbreviation which describes the subtype |
Sequence: <timestamp> <sessionkey> <action> <host> <referer> <URL> <user agent>
| <action> | covers 00 to 09 to describe the subtype; till now, only 00 is in use |
| <URL> | GOId or name of entry point |
| <host> | is the name or IP-address of the remote host |
| <referer> | the referring page |
| <user agent> | the user's browser |
Example: 319c4649 46A91A24 00 fiicmss04 http://yahoo root Mozilla 1.5
This info is logged only with the start of a new session since it is always accessible via the sessionkey.
Sequence: <timestamp> <sessionkey> <action> <URL> <size> <timediff> <flag>
| <action> | covers 10 .. 19, with following meaning:
|
| <URL> | GOId for local, URL for remote objects |
| <size> | number of bytes transferred |
| <timediff> | time it took to transfer the object |
| <flag> | 2 bit flag indicating:
|
319c4649 46A91A24 11 0x811b9908_0x00000009 1234 0.4 01
Sequence: <timestamp> <sessionkey> <action> <URL> <description>
| <action> | covers 20..29, although only 20 is used so far |
| <URL> | GOId for local, URL for remote objects |
| <description> | gives the type of error |
Example: 319c4649 46A91A24 20 http://DES Collection not found
Sequence: <timestamp> <sessionkey> <action> <ti/kwd-hits> <ft-hits> <scope> <term>
| <action> | covers 30 .. 39, 30 used only |
| <ti/kwd-hits> | hits of title/keyword search |
| <ft-hits> | hits of fulltext search |
| <scope> | scope of search |
| <term> | search term as handed to the search-engine |
Example: 319c4649 abcdefg 30 11 17 sample musicbox
Alfons Schmid
aschmid@iicm.edu
Graz, Oct. 9th, 1996