http://qs321.pair.com?node_id=1131075


in reply to Re^9: Question about the most efficient way to read Apache log files without All-In-One Modules from CPAN (personal learning exercise)
in thread Question about the most efficient way to read Apache log files without All-In-One Modules from CPAN (personal learning exercise)

  1. That's the HTTP spec, which is all very nice but is not the Apache Log spec.
  2. Just assuming for the sake of argument that the HTTP command line is indeed being copied verbatim into that field, there's also the question of whether all of the clients out there will be actually following the spec — we live in a world with script kiddies and DDOS hobbyists, after all (hint: I'm guessing there's a reason the Apache folks saw fit to double-quote that field)

In other news, in my real-live Apache 2.4 webserver using the default-format log, I see lines like this:

10.54.33.35 - - [18/Jun/2015:09:05:55 -0700] "-" 408 0