Viewing what connections are doing? 1

[axi0m]

How can I view what a certain apache connection is doing?

When I use netstat -a I see like 10 connections comming from 1 IP address and it's using like 16KB/s worth of bandwidth. I'm assuming this user is downloading some files through my webserver but I have no way of finding out what files they are accessing. How can I figure out what files this user is accessing ?

 

[rosenk]

You can take a look at your apache access logs and search for the IP address. Where they're stored is dependent on your apache configuration.

 

[RhythmAce]

You can see that in apache's access_log. My guess is that with a bandwidth so low, they are just viewing your web pages and not actually downloading them. I know I'm gonna take a hit for that because when you view a page on a server, the html output and all graphics get downloaded then stored in your browser's cache.

 

[axi0m]

He's had a solid 16KB/s going for like 3 hours though. I don't have any websites on my web server that take more then 5 minutes to surf the whole site. He's gotta be accessing a larger file somehow. I have lots of directories with large files in them but none in the web directories... that is part of why I am so puzzled.

 

[axi0m]

Ok looking at the access.log worked. I was able to see what files he was getting... i just setup a .htaccess on that directory and -HUP httpd.

Thanks much

 

[btaber]

easiest, mod_status:

http://httpd.apache.org/docs/mod/mod_status.html