note
taint
<i>"Perhaps stating your overall objective would be handy here to get more appropriate feedback"</i><p>
Hmm... judging by your answer; I <i>do</i> indeed need to better define my objective -- Sorry. :-(</p><p>
What I'm hoping to ultimately achieve, is to have the <i>current</i> logging the HTTPd provides, return (resolve) the connecting IP addresses it currently dumps to the log(s). Maybe an example would be prudent here:
<code>
66.249.69.38 my.web.host - [12/Jun/2018:12:32:26 -0700] "GET / HTTP/1.1" 200 3306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36"
</code>
When what I'd <i>really</i> like to see, is the following:
<code>
crawl-66-249-69-38.googlebot.com my.web.host - [12/Jun/2018:12:32:26 -0700] "GET / HTTP/1.1" 200 3306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36"
</code>
Seems that this should be possible. I could simply:
<code>
#!/bin/sh -
cat /var/log/my.web.host-access-log | awk '{ print $1; }' | ...
</code>
or some such to feed the logs to a resolver. But I'm <i>ideally</i> looking for a way to process the log(s) (connections) in "real time". So that the logs have the correct access times. I can imagine filtering , or <i>piping</i> it. But am not sure if they're the only/best solutions. So here I ask. :-)</p><p>Thanks, [stevieb], for taking the time to respond!</p>
<!-- Node text goes above. Div tags should contain sig only -->
<div class="pmsig"><div class="pmsig-977156">
<p>Evil is good, for without it, Good would have no value<br>
<b>¡λɐp ʇɑəɹ⅁ ɐ əʌɐɥ puɐ ʻꜱdləɥ ꜱᴉɥʇ ədoH</b>
</p>
</div></div>
1216581
1216584