Just because I'm bored and I was doing some boring tedious admin-style things, here's and excerpt from a mapchange to basalt wif an assload of pubbies in the server, so we have a good example here.
Code:
__USER IP_____________________TIMESTAMP____________________________________________________REQUESTED_URL__________________________________________HTTP VERSION__HTTPCODE_FILESIZE___REFERRER____________BROWSERTYPE
69.119.81.54 - -Â [11/Jun/2010:20:45:08 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
74.140.210.176 - - [11/Jun/2010:20:45:09 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
69.142.166.191 - - [11/Jun/2010:20:45:09 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
24.38.182.34 -Â - [11/Jun/2010:20:45:13 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
24.145.173.101 - - [11/Jun/2010:20:45:14 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
66.183.133.70 - -Â [11/Jun/2010:20:45:14 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
184.56.124.108 - - [11/Jun/2010:20:45:15 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
142.162.122.17 - - [11/Jun/2010:20:45:16 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
76.254.25.175Â - - [11/Jun/2010:20:45:18 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
114.77.254.237 - - [11/Jun/2010:20:45:23 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
72.135.111.140 - - [11/Jun/2010:20:45:24 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
72.241.141.107 - - [11/Jun/2010:20:45:27 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865985 "-" "-"
68.32.250.21 - - [11/Jun/2010:20:45:35 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp  HTTP/1.1" 404 2784  "hl2://8.12.20.112:27015" "Half-Life 2"
68.32.250.21Â - - [11/Jun/2010:20:45:52 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
173.29.156.43Â - - [11/Jun/2010:20:49:14 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
216.104.15.130 - - [11/Jun/2010:20:50:57 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.0" 200 442418 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
68.32.250.21Â - - [11/Jun/2010:21:00:04 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 262205 "hl2://8.12.20.112:27015" "Half-Life 2"
74.108.20.138Â - - [11/Jun/2010:21:19:33 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865985 "-" "-"
So here's the HTTP logs for dummies on what this says, for those of you who are curious but don't know wtf that said. If you know what that said... well you already know what all the junk below here says. That's why I put the log 1st. I LOVE YOU GUIES.
Should always be <IP> <DATE> <URL>
HTTP/1.1 200 <SIZE OF FILE IN Bytes> <RED/BLUE IP>
"Half-Life 2"
Following the timestamps while reading down, we can see each user progressively loading to the point where it realizes it's a new map it doesn't have and it asks for it. The area where the log says "
HTTP/1.1 200" - the 200 is the HTTP code for "File found, and served to client properly" - it's the opposite of the 404 Not Found error that p. much everyone on the internets knows.
Now, as you read progressively further down, you see some lines that obviously don't match the rest, these are the users who got an error and booted out with some random error, let's dissect these.
Code:
72.241.141.107 - - [11/Jun/2010:20:45:27 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865985 "-" "-"
Looking at most of the request, it's OK, the users TF2 client asked for the proper file, koth_basalt_b1
.bsp.bz2 - and we can see by the HTTP 200 code and the filesize, it sent properly, even though the users client did not supply a referrer and it's user string like every other client did.
Code:
68.32.250.21 - - [11/Jun/2010:20:45:35 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp  HTTP/1.1" 404 2784  "hl2://8.12.20.112:27015" "Half-Life 2"
68.32.250.21Â - - [11/Jun/2010:20:45:52 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 5865990 "hl2://8.12.20.112:27015" "Half-Life 2"
Now here's a prime example of what's going on. We can see by the IP it's the same user, and as indicated by the top to bottom order, the fileserver got a request for a .bsp file, said it's not here and then got a request for the .bsp.bz2 file 18 seconds later. The 18 second delay is far too long for this to have been the automated process, so that indicates to us that the user wanted to stay, and did the retry in console to connect, and his client asked for the proper map file after that.
Code:
216.104.15.130 - - [11/Jun/2010:20:50:57 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.0" 200 442418 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
I'm not even sure what to make of this really. Checking the IP across the whole log I can see this user has requested 9 maps so far this month, and has gotten 2 rejections from the server because of bad .bsp requests, and overcame both of them with a retry in console. Based on this log, they either quit TF2 or alt-tabbed out, hopped on firefox and downloaded the map manually, but if we look at the filesize #, it stops @ 442418B(0.4MB), which is far smaller than the 5.5MB size of the map, so looks like they alt-tabbed only to not download the whole map....
Code:
68.32.250.21Â - - [11/Jun/2010:21:00:04 -0500] "GET http://rilwar.info/www.brbuninstalling.com/maps_ftp/sv_downloadurl/tf2/maps/koth_basalt_b1.bsp.bz2 HTTP/1.1" 200 262205 "hl2://8.12.20.112:27015" "Half-Life 2"
Here's the last weird one. I didn't get a referrer or host, but it also requested the proper file, but based on filesize, the user canceled the map download prematurely.