Function parse_log_buff

src/traffic_logstats/logstats.cc:1253–1764

////////////////////////////////////////////////////////////////////////// Parse a log buffer

///////////////////////////////////////////////////////////////////////////////
// Parse a log buffer
int
parse_log_buff(LogBufferHeader *buf_header, bool summary = false, bool aggregate_per_userid = false)
{
  static LogFieldList *fieldlist = nullptr;

  LogEntryHeader   *entry;
  LogBufferIterator buf_iter(buf_header);
  LogField         *field = nullptr;
  ParseStates       state;

  char *read_from;
  char *tok;
  char *ptr;
  int   tok_len;
  int   flag = 0; // Flag used in state machine to carry "state" forward

  // Parsed results
  int          http_code = 0, size = 0, result = 0, hier = 0, elapsed = 0;
  bool         ipv6 = false;
  OriginStats *o_stats;
  HTTPMethod   method;
  URLScheme    scheme;

  if (!fieldlist) {
    fieldlist = new LogFieldList;
    ink_assert(fieldlist != nullptr);
    bool agg = false;
    LogFormat::parse_symbol_string(buf_header->fmt_fieldlist(), fieldlist, &agg);
  }

  if (!cl.no_format_check) {
    // Validate the fieldlist
    field                                = fieldlist->first();
    const std::string_view test_fields[] = {"cqtq", "ttms", "chi", "crc", "pssc", "psql", "cqhm", "pquc", "caun", "phr", "shn"};
    for (auto &i : test_fields) {
      if (i != field->symbol()) {
        cerr << "Error parsing log file - expected field: " << i << ", but read field: " << field->symbol() << endl;
        return 1;
      }
      field = fieldlist->next(field);
    }
  }

  // Loop over all entries
  while ((entry = buf_iter.next())) {
    read_from = (char *)entry + sizeof(LogEntryHeader);
    // We read and skip over the first field, which is the timestamp.
    if ((field = fieldlist->first())) {
      read_from += INK_MIN_ALIGN;
    } else { // This shouldn't happen, buffer must be messed up.
      break;
    }

    state   = P_STATE_ELAPSED;
    o_stats = nullptr;
    method  = METHOD_OTHER;
    scheme  = SCHEME_OTHER;