:py:mod:`dissect.target.plugins.apps.webserver.apache`
======================================================
.. py:module:: dissect.target.plugins.apps.webserver.apache
Module Contents
---------------
Classes
~~~~~~~
.. autoapisummary::
dissect.target.plugins.apps.webserver.apache.LogFormat
dissect.target.plugins.apps.webserver.apache.ApachePlugin
Functions
~~~~~~~~~
.. autoapisummary::
:nosignatures:
dissect.target.plugins.apps.webserver.apache.apache_response_time_to_ms
Attributes
~~~~~~~~~~
.. autoapisummary::
dissect.target.plugins.apps.webserver.apache.RE_CONFIG_CUSTOM_LOG_DIRECTIVE
dissect.target.plugins.apps.webserver.apache.RE_CONFIG_ERRORLOG_DIRECTIVE
dissect.target.plugins.apps.webserver.apache.RE_REMOTE_PATTERN
dissect.target.plugins.apps.webserver.apache.RE_REFERER_USER_AGENT_PATTERN
dissect.target.plugins.apps.webserver.apache.RE_RESPONSE_TIME_PATTERN
dissect.target.plugins.apps.webserver.apache.RE_ACCESS_COMMON_PATTERN
dissect.target.plugins.apps.webserver.apache.RE_ERROR_COMMON_PATTERN
dissect.target.plugins.apps.webserver.apache.LOG_FORMAT_ACCESS_COMMON
dissect.target.plugins.apps.webserver.apache.LOG_FORMAT_ACCESS_VHOST_COMBINED
dissect.target.plugins.apps.webserver.apache.LOG_FORMAT_ACCESS_COMBINED
dissect.target.plugins.apps.webserver.apache.LOG_FORMAT_ERROR_COMMON
.. py:class:: LogFormat
Bases: :py:obj:`NamedTuple`
.. py:attribute:: name
:type: str
.. py:attribute:: pattern
:type: re.Pattern
.. py:data:: RE_CONFIG_CUSTOM_LOG_DIRECTIVE
.. py:data:: RE_CONFIG_ERRORLOG_DIRECTIVE
.. py:data:: RE_REMOTE_PATTERN
:value: Multiline-String
.. raw:: html
Show Value
.. code-block:: python
"""
(?P.*?) # Client IP address of the request.
\s
(?P.*?) # Remote logname (from identd, if supplied).
\s
(?P.*?) # Remote user if the request was authenticated.
"""
.. raw:: html
Show Value
.. code-block:: python
"""
"(?P.*?)" # Value of the 'Referer' HTTP Header.
\s
"(?P.*?)" # Value of the 'User-Agent' HTTP Header.
"""
.. raw:: html
Show Value
.. code-block:: python
"""
(
"
Time:\s
(?P.*?) # Time taken to serve the response, including a unit of measurement.
"
)
"""
.. raw:: html
Show Value
.. code-block:: python
"""
\[(?P[^\]]*)\] # Timestamp including milliseconds.
\s
(\[(?P[0-9]+)\]\s)? # The process ID of the child that serviced the request (optional).
"
(?P.*?) # The HTTP Method used for the request.
\s
(?P.*?) # The HTTP URI of the request.
\s
?(?PHTTP\/.*?)? # The request protocol.
"
\s
(?P\d{3}) # The HTTP Status Code of the response.
\s
(?P-|\d+) # Bytes sent, including headers.
"""
.. raw:: html
Show Value
.. code-block:: python
"""
\[
(?P[^\]]*) # Timestamp including milliseconds.
\]
\s
\[
(?P[^:]*) # Name of the module logging the message.
\:
(?P[^]]*) # Loglevel of the message.
\]
\s
\[
pid\s(?P\d*) # Process ID of current process.
(\:tid\s(?P\d*))? # Thread ID of current thread (optional).
\]
\s
((?P[^\:]*)\:\s)? # Source file name and line number of the log call (optional).
(
\[
client\s(?P[^]]+) # Client IP address and port of the request (optional).
\]\s
)?
((?P\w+)\:\s)? # APR/OS error status code and string (optional).
(?P.*) # The actual log message.
"""
.. raw:: html