星外系统IIS日志分析常用的几个命令小结

　　命令中的{}代表源日志文件的路径实际运行的时候请替换为真实路径命令中的{}代表日志导出到的文件的路径实际运行的时候请替换为真实路径例如iiislogexe i:BIN o:WC "select siteiduristembytessent from d:iislogwsvcsssibl to d:alog order by bytessent desc"查询某IP访问某网站的某网页的次数倒序排列iiislogexe i:BIN o:WC "select clientipaddresssiteiduristemcount(clientipaddress) from {} to {} group by clientipaddressuristemsiteid order by count(clientipaddress) desc"某IP访问整个服务器网站的次数iiislogexe i:BIN o:WC "select clientipaddresscount(clientipaddress) from {} to {} group by clientipaddress order by count(clientipaddress) desc"按照接收数据（用户上传）大小排列iiislogexe i:BIN o:WC "select siteiduristembytesreceived from {} to {} order by bytesreceived desc"按照发送数据（用户下载）大小排列iiislogexe i:BIN o:WC "select siteiduristembytessent from {} to {} order by bytessent desc"检测PHP发包iiislogexe i:BIN o:WC "select siteiduristemuriquery from {} to {} where uriquery like %port=% and uriquery like %ip=%"

飞机一阵抖动，我终于说出了最后一句再见。