星外系統(tǒng)IIS日志分析常用的幾個(gè)命令小結(jié)
發(fā)布日期:2021-12-19 00:05 | 文章來(lái)源:CSDN
命令中的{1}代表日志導(dǎo)出到的文件的路徑,實(shí)際運(yùn)行的時(shí)候請(qǐng)?zhí)鎿Q為真實(shí)路徑
例如:
7i24iislog.exe -i:BIN -o:W3C "select siteid,uristem,bytessent from 'd:\iislog\w3svc\sss.ibl' to 'd:\a.log' order by bytessent desc"
1、查詢某IP訪問(wèn)某網(wǎng)站的某網(wǎng)頁(yè)的次數(shù),倒序排列
7i24iislog.exe -i:BIN -o:W3C "select clientipaddress,siteid,uristem,count(clientipaddress) from '{0}' to '{1}' group by clientipaddress,uristem,siteid order by count(clientipaddress) desc" 2、某IP訪問(wèn)整個(gè)服務(wù)器網(wǎng)站的次數(shù)
7i24iislog.exe -i:BIN -o:W3C "select clientipaddress,count(clientipaddress) from '{0}' to '{1}' group by clientipaddress order by count(clientipaddress) desc" 3、按照接收數(shù)據(jù)(用戶上傳)大小排列
7i24iislog.exe -i:BIN -o:W3C "select siteid,uristem,bytesreceived from '{0}' to '{1}' order by bytesreceived desc" 4、按照發(fā)送數(shù)據(jù)(用戶下載)大小排列
7i24iislog.exe -i:BIN -o:W3C "select siteid,uristem,bytessent from '{0}' to '{1}' order by bytessent desc" 5、檢測(cè)PHP發(fā)包
7i24iislog.exe -i:BIN -o:W3C "select siteid,uristem,uriquery from '{0}' to '{1}' where uriquery like '%port=%' and uriquery like '%ip=%'"
版權(quán)聲明:本站文章來(lái)源標(biāo)注為YINGSOO的內(nèi)容版權(quán)均為本站所有,歡迎引用、轉(zhuǎn)載,請(qǐng)保持原文完整并注明來(lái)源及原文鏈接。禁止復(fù)制或仿造本網(wǎng)站,禁止在非www.sddonglingsh.com所屬的服務(wù)器上建立鏡像,否則將依法追究法律責(zé)任。本站部分內(nèi)容來(lái)源于網(wǎng)友推薦、互聯(lián)網(wǎng)收集整理而來(lái),僅供學(xué)習(xí)參考,不代表本站立場(chǎng),如有內(nèi)容涉嫌侵權(quán),請(qǐng)聯(lián)系alex-e#qq.com處理。
相關(guān)文章