Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of yehuda@ymkatz.net designates
 209.85.214.45 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=ymkatz.net; s=g;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :cc:content-type;
        b=JDAMmDzgS+MQQI6Kj2bItbxuRWh3mjl6BQxYbz14hF3UTqX+cg3Xr5DItTIAUk1/E+
         svFTvKfliFJIPbXFjDOGGIzFEe+8jDk08oHyuXBAGnOrk6b3UAJdB6iVGInDM27HpjbJ
         TgK8aJlZPBWnIzGhP6mWeeKyxZKB8ZCpiGtTI=
MIME-Version: 1.0
In-Reply-To: <BANLkTimCFXX7J4VYqUuVqgf6u_QLAg1Qfw@mail.gmail.com>
References: <BANLkTimCFXX7J4VYqUuVqgf6u_QLAg1Qfw@mail.gmail.com>
From: Yehuda Katz <yehuda@ymkatz.net>
Date: Tue, 5 Apr 2011 14:11:22 -0400
Message-ID: <BANLkTimu=g0=vnSWX91Q8On_OTem_qROMQ@mail.gmail.com>
To: users@httpd.apache.org
Cc: Chad Morland <cmorland@gmail.com>
Content-Type: multipart/alternative; boundary=0015174737aaf0a64804a02fce47
Subject: Re: [users@httpd] Full Request URI in access_log

--0015174737aaf0a64804a02fce47
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Tue, Apr 5, 2011 at 1:00 PM, Chad Morland <cmorland@gmail.com> wrote:

> I've got a domain hosted on one of our servers that seems to be getting a
> ton of junk traffic from Bit Torrent clients.
>
> The request that is showing up in my access_log is:
>
>
> /announce...cedc031275%20430?info_hash=3D%CE%0Az%19%3C%3B~%84%2F.%8Cc%8A%=
DDyZ%C7%18%18%26&peer_id=3D-BC0109-%5E%02%B2%FDw%AB%19%DD%D9%BDxB&port=3D24=
668&natmapped=3D1&localip=3D192.168.1.11&port_type=3Dwan&uploaded=3D0&downl=
oaded=3D0&left=3D31457280&numwant=3D100&compact=3D1&no_peer_id=3D1&key=3D48=
054&event=3Dstarted
>
> As you can see the full URI is not displayed after "announce". What is
> causing this to be clipped? I've tried different LogFormat options but
> nothing seems to display the full URI.
>

You might be able to use "%U" for the URL without the query string and
separately "%q" for the query string only.

- Y

--0015174737aaf0a64804a02fce47
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote">On Tue, Apr 5, 2011 at 1:00 PM,=
 Chad Morland <span dir=3D"ltr">&lt;<a href=3D"mailto:cmorland@gmail.com">c=
morland@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote=
" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">

I&#39;ve got a domain hosted on one of our servers that seems to be getting=
 a ton of junk traffic from Bit Torrent clients. <br><br>The request that i=
s showing up in my access_log is:<br><br>/announce...cedc031275%20430?info_=
hash=3D%CE%0Az%19%3C%3B~%84%2F.%8Cc%8A%DDyZ%C7%18%18%26&amp;peer_id=3D-BC01=
09-%5E%02%B2%FDw%AB%19%DD%D9%BDxB&amp;port=3D24668&amp;natmapped=3D1&amp;lo=
calip=3D192.168.1.11&amp;port_type=3Dwan&amp;uploaded=3D0&amp;downloaded=3D=
0&amp;left=3D31457280&amp;numwant=3D100&amp;compact=3D1&amp;no_peer_id=3D1&=
amp;key=3D48054&amp;event=3Dstarted<br>


<br>As you can see the full URI is not displayed after &quot;announce&quot;=
. What is causing this to be clipped? I&#39;ve tried different LogFormat op=
tions but nothing seems to display the full URI.<br></blockquote><div>

<br></div><div>You might be able to use &quot;%U&quot; for the URL without =
the query string and separately &quot;%q&quot; for the query string only.</=
div><div><br></div><div>- Y</div></div></div>

--0015174737aaf0a64804a02fce47--