Reading Log files

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Reading Log files

Post Body

Hi,

I'm a college student taking a class on network forensics and I am learning to read log files and analyze them. For some things I can grab from these logs but other things I need help identifying. For instance, I am trying to find out where to look for the request times. Here's an example from part of the log file:

- 1286536309.450 917 192.168.0.227 TCP_MISS/200 20670 GET r/http://www.youtube.com/watch? - DIRECT/209.85.231.136 text/html

-1286536309.549 172 192.168.0.227 TCP_MISS/204 294 GET r/http://v15.lscache3.c.youtube.com/generate_204? - DIRECT/122.160.120.150 text/html

I know the first column is like the "time stamp" of the request but where does it show how long the request took from these lines? Thanks in advance

Author

Account Strength

90%

Account Age

6 years

Verified Email

Yes

Verified Flair

Total Karma

2,946

Link Karma

1,377

Comment Karma

1,569

Profile updated: 22 hours ago

Posts updated: 8 months ago

ElChiiko

Subreddit

r/computerforensics

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 6 years ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/computerfor...