/etc/octopussy/conf/services/Apache_Traffic.xml is in octopussy 1.0.6-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 | <?xml version='1.0' encoding='UTF-8'?>
<octopussy_service name="Apache_Traffic"
description="Apache Traffic Service"
icon="software/logo_apache"
website="http://httpd.apache.org/"
version="200708230002">
<message loglevel="Information"
msg_id="Apache_Traffic:code_200"
pattern="<@DATE_TIME_ISO:NULL@> <@WORD:device@> apache: <@IP_ADDR:src_addr@> - - [<@DATE_TIME_APACHE_ACCESS:datetime@>] "<@WORD:http_method@> <@STRING:url@> HTTP/<@WORD:http_version@>" <@REGEXP("200"):status@> <@BYTES:rec_bytes@> "<@STRING:referer@>" "<@USER_AGENT:user_agent@>" <@STRING:NULL@>"
rank="001"
table="Web_Traffic"
taxonomy="Traffic.Granted" />
<message loglevel="Information"
msg_id="Apache_Traffic:code_302"
pattern="<@DATE_TIME_ISO:NULL@> <@WORD:device@> apache: <@IP_ADDR:src_addr@> - - [<@DATE_TIME_APACHE_ACCESS:datetime@>] "<@WORD:http_method@> <@STRING:url@> HTTP/<@WORD:http_version@>" <@REGEXP("302"):status@> - "<@STRING:referer@>" "<@USER_AGENT:user_agent@>" <@STRING:NULL@>"
rank="002"
table="Web_Traffic"
taxonomy="Traffic" />
<message loglevel="Notice"
msg_id="Apache_Traffic:code_503"
pattern="<@DATE_TIME_ISO:NULL@> <@WORD:device@> apache: <@IP_ADDR:src_addr@> - - [<@DATE_TIME_APACHE_ACCESS:datetime@>] "<@WORD:http_method@> <@STRING:url@> HTTP/<@WORD:http_version@>" <@REGEXP("503"):status@> - "<@STRING:referer@>" "<@USER_AGENT:user_agent@>" <@STRING:NULL@>"
rank="004"
table="Web_Traffic"
taxonomy="Traffic.Denied" />
<message loglevel="Notice"
msg_id="Apache_Traffic:code_40x"
pattern="<@DATE_TIME_ISO:NULL@> <@WORD:device@> apache: <@IP_ADDR:src_addr@> - - [<@DATE_TIME_APACHE_ACCESS:datetime@>] "<@WORD:http_method@> <@STRING:url@> HTTP/<@WORD:http_version@>" <@REGEXP("40\d"):status@> - "<@STRING:referer@>" "<@USER_AGENT:user_agent@>" <@STRING:NULL@>"
rank="003"
table="Web_Traffic"
taxonomy="Traffic.Denied" />
<message loglevel="Notice"
msg_id="Apache_Traffic:code_400"
pattern="<@DATE_TIME_ISO:NULL@> <@WORD:device@> apache: <@IP_ADDR:src_addr@> - - [<@DATE_TIME_APACHE_ACCESS:datetime@>] "<@WORD:http_method@> <@STRING:url@>" <@REGEXP("400"):status@> <@BYTES:rec_bytes@> "<@STRING:referer@>" "<@USER_AGENT:user_agent@>" <@STRING:NULL@>"
rank="005"
table="Web_Traffic"
taxonomy="Traffic" />
<message loglevel="Information"
msg_id="Apache_Traffic:code_200_zero_data"
pattern="<@DATE_TIME_ISO:NULL@> <@WORD:device@> apache: <@IP_ADDR:src_addr@> - - [<@DATE_TIME_APACHE_ACCESS:datetime@>] "<@WORD:http_method@> <@STRING:url@> HTTP/<@WORD:http_version@>" <@REGEXP("200"):status@> - "<@STRING:referer@>" "<@USER_AGENT:user_agent@>" <@STRING:NULL@>"
rank="006"
table="Web_Traffic"
taxonomy="Traffic" />
</octopussy_service>
|