分享

最牛的IIS服务器日志分析详解(转)

 开启美好每一天 2017-04-01

      查看服务器IIS服务器日志是在Windows文件夹.>>>>system32>>LogFiles>>W3SVC1下的.Log文件。
  打开一个IIS的日志,我们在最上边大约第三行能够看到一个表头,像这样:
  #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
  这是日志每行中每个字段的名称,我们看到的"200 0 64"是最后3个,那就是
  sc-status sc-substatus sc-win32-status 这三个了,来看看这三个是什么东西:
sc-status:
  HTTP协议的状态.HTTP协议的状态代码为200,这个可能大家不熟悉,但是,HTTP404找不到文件,HTTP500内部服务器错误,这两个状态代码大家应该很熟悉了吧.jpg"100" : Continue
    * "101" : witching Protocols
    * "200" : OK
    * "201" : Created
    * "202" : Accepted
    * "203" : Non-Authoritative Information
    * "204" : No Content
    * "205" : Reset Content
    * "206" : Partial Content
    * "300" : Multiple Choices
    * "301" : Moved Permanently
    * "302" : Found
    * "303" : See Other
    * "304" : Not Modified
    * "305" : Use Proxy
    * "307" : Temporary Redirect
    * "400" : Bad Request
    * "401" : Unauthorized
    * "402" : Payment Required
    * "403" : Forbidden
    * "404" : Not Found
    * "405" : Method Not Allowed
    * "406" : Not Acceptable
    * "407" : Proxy Authentication Required
    * "408" : Request Time-out
    * "409" : Conflict
    * "410" : Gone
    * "411" : Length Required
    * "412" : Precondition Failed
    * "413" : Request Entity Too Large
    * "414" : Request-URI Too Large
    * "415" : Unsupported Media Type
    * "416" : Requested range not satisfiable
    * "417" : Expectation Failed
    * "500" : Internal Server Error
    * "501" : Not Implemented
    * "502" : Bad Gateway
    * "503" : Service Unavailable "504" : Gateway Time-out
    * "505" : HTTP Version not supported ?

 cs(User-Agent):

    Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+InfoPath.1;+SE+2.X+MetaSr+1.0)

 Trident的含义为:

    Trident(又称为MSHTML),是微软的视窗操作系统(Windows)搭载的网页浏览器—Internet Explorer的排版引擎的名称。

  • Trident(IE4)
  • Trident II(IE5)— 增进对CSS1.0的支持及对CSS2重大的变更
  • Trident III(IE5.5)— 修正部份CSS的排版控制
  • Trident IV(IE6)— 修正了一部份box-model[1]的错误以及增加了“相容模式(Quirks Mode)”[2]切换功能,以增加对文件类型描述(Document Type Definition,DTD)的支持
  • Trident V(IE7)— 修正许多CSS排版处理上的错误以及增加对PNG图档格式的alpha通道(半透明)的支持
  • Trident 4.0(IE8)— 第一个版本Acid 2合格

判断用户使用的浏览器种类:

IE8.0:
浏览器版本:
4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729;VENUS_IE_ADDON-0.2.7.81)
浏览器熊熊历险记的用户代理报头:
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)


firefox4.0.7:
浏览器版本:
5.0 (Windows)
浏览器的用户代理报头:
Mozilla/5.0 (Windows NT 5.1; rv:2.0b7) Gecko/20100101 Firefox/4.0b7


谷歌:
浏览器版本:
5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.12 (KHTML, like Gecko) Chrome/9.0.587.0 Safari/534.12
浏览器的李刚 道歉用户代理报头:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.12 (KHTML, like Gecko) Chrome/9.0.587.0 Safari/534.12


360浏览器(3.6):
浏览器版本:
4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)
浏览器的用户代理报头:
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)


360极速版:
浏览器版本:
4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)
浏览器的用户代理报头:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)


浏览器版本:
5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.63 Safari/534.3
浏览器摩托罗拉MileStone的用户代理报头:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.63 Safari/534.3
浏览器的用户代理报头:
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)

 

QQ浏览器5:
浏览器版本:
4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81); QQBrowser/5.0.6587.400 (trident)

浏览器的鹏华价值用户代理报头:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81); QQBrowser/5.0.6587.400 (trident)


TT4.8:
浏览器版本:
4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; TencentTraveler 4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)
浏览器的用户代理报头:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; TencentTraveler 4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)


115浏览器:
浏览器版本:
4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)
浏览器的用户代理报头:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81)


世界之窗:
浏览器版本:
4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81; TheWorld)
浏览器不为人民服务的用户代理报头:
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81; TheWorld)


Opera:
浏览器版本:
9.80 (Windows NT 5.1; U; zh-cn)
浏览器的用户代理报头:
Opera/9.80 (Windows NT 5.1; U; zh-cn) Presto/2.6.37 Version/10.70


遨游3.0:
浏览器版本:
5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.9 (KHTML, like Gecko) Maxthon/3.0 Safari/533.9
浏览器的FIFA用户代理报头:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.9 (KHTML, like Gecko) Maxthon/3.0 Safari/533.9


闪游浏览器:
浏览器版本:
4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81; SaaYaa)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81; SaaYaa)


Safari:
浏览器版本:
5.0 (Windows; U; Windows NT 5.1; zh-CN) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4
浏览器的用户代理报头:
Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4


搜狗2:
浏览器版本:
4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; SE 2.X MetaSr 1.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SE 2.X MetaSr 1.0; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81; SE 2.X MetaSr 1.0; SE 2.X MetaSr 1.0)
浏览器的用户代理报头:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; QQDownload 667; SE 2.X MetaSr 1.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SE 2.X MetaSr 1.0; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; VENUS_IE_ADDON-0.2.7.81; SE 2.X MetaSr 1.0; SE 2.X MetaSr 1.0)

    本站是提供个人知识管理的网络存储空间,所有内容均由用户发布,不代表本站观点。请注意甄别内容中的联系方式、诱导购买等信息,谨防诈骗。如发现有害或侵权内容,请点击一键举报。
    转藏 分享 献花(0

    0条评论

    发表

    请遵守用户 评论公约

    类似文章 更多