DescriptionField
HTTP "referrer" field, populated if this request was referred by another (e.g. request for an image
that is part of a web page).
ref
User-Agent of the client that’s making this request.ua
HTTP request string (including request method, URL requested, and request protocol).req
Domain portion of the request URI.dom
Sophos filetype category (e.g. both ‘application/x-gzip’ & ‘application/x-bzip2’ belong to the
category ‘archive.compress’).
filetype
Policy rule ID matched for this request. Local Site List categorization rules are prefixed with
'LSL-'. Sophos categorization rules are not documented.
rule
Size of the file served for this request (does not include HTTP protocol overhead).filesize
Amount of time (in seconds) it took to perform access checks.axtime
Amount of time (in seconds) it took to perform file-typing.fttime
Amount of time (in seconds) it took to perform scanning.scantime
Internal use only.src_cat
Internal use only.labs_cat
Internal use only.dcat_prox
The IP address that the request resolves to.target_ip
Internal use only.labs_rule_id
Amount of time (in seconds) that a web resource is in the queue for scanning.reqtime
Amount of time (in seconds) it took to perform Active Directory or eDirectory authentication.adtime
Internal use only.ftbypass
If you have specified a connection profile for authentication, this is the type of operating system
or device that was detected.
os
220 | Interpreting Log Files | Sophos Web Appliance