Week 10 - Emails and Web Data Flashcards
TRUE OR FALSE: Local servers store logs on email activity.
TRUE, they often do.
What are some local servers that hold useful log data?
Web server
Email server
sftp server
ssh server
What kind of data does a web server log?
Data on the activity of the devices interacting with the web server. This might include requests for services, documents sent out, date-times for usage etc..
What is the most important log type on a web server?
The access log. This stores data on requests from devices for services, files, websites.
What data fields are stored in the access log?
Requester's IP address Requester's Identity User ID Date and time of the request Request method (GET method etc..) Location, name and size of the requested data Status code for the exchange The webpage that contained the link the requested used to make this request
What can a web server request be made for?
Access to a webpage (This may include multiple requests for access to file/data and/or services)
Access to a service
Access to a file/data
What is the most used log format on web servers?
Common Log Format (CLF)
What is a combined log format?
It is similar to the common log format (CLF), but stores a couple of extra fields.
What are the extra fields stored as part of a combined log format?
The referrer page (The page the user came from before making the request)
The user agent (Information about the clients browser)
What does a web proxy do?
It logs ALL outgoing web requests, as well as the normal local web requests.
What type of web requests does a normal web server log?
Local web request to do with the service it is providing.
What is the common transfer protocol for email servers?
SMTP
What data do email logs contain?
Email headers
Source (Sender) information
Destination (Receiver) information
