access.log

66.249.64.3 1.m0n0wall.pool.ntp.org - [14/Nov/2013:01:43:35 +0000] "GET /?a=b&t=z&s=1GiB HTTP/1.1" 301 184 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"

2001:470:5:932:2e0:b8ff:febb:161b mtr-atlanta.mn9.us - [14/Nov/2013:02:21:36 +0000] "GET / HTTP/1.1" 200 892 "-" "Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0"
2001:470:5:932:2e0:b8ff:febb:161b mtr-atlanta.mn9.us - [14/Nov/2013:02:21:37 +0000] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0"
2001:470:5:932:2e0:b8ff:febb:161b mtr-atlanta.mn9.us - [14/Nov/2013:02:21:37 +0000] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0"

access11.log

66.249.64.3 48281 "1.m0n0wall.pool.ntp.org" 66.228.59.187 80 "pool.ntp.org" 61794 1 - - - "-" [2013-11-14T01:43:35+00:00] "GET /?a=b&t=z&s=1GiB HTTP/1.1" 301 397 184 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" "-"

2001:470:5:932:2e0:b8ff:febb:161b 46995 "mtr-atlanta.mn9.us" 2600:3c02::13:204 443 "mtr-atlanta.mn9.us" 61959 1 on TLSv1.2 - "-" [2013-11-14T02:21:36+00:00] "GET / HTTP/1.1" 200 1108 892 2.81 "-" "Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" "-" "ECDHE-RSA-AES128-GCM-SHA256"
2001:470:5:932:2e0:b8ff:febb:161b 46995 "mtr-atlanta.mn9.us" 2600:3c02::13:204 443 "mtr-atlanta.mn9.us" 61959 2 on TLSv1.2 - "-" [2013-11-14T02:21:37+00:00] "GET /favicon.ico HTTP/1.1" 404 432 209 1.18 "-" "Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" "-" "ECDHE-RSA-AES128-GCM-SHA256"
2001:470:5:932:2e0:b8ff:febb:161b 46995 "mtr-atlanta.mn9.us" 2600:3c02::13:204 443 "mtr-atlanta.mn9.us" 61959 3 on TLSv1.2 - "-" [2013-11-14T02:21:37+00:00] "GET /favicon.ico HTTP/1.1" 404 432 209 1.18 "-" "Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" "-" "ECDHE-RSA-AES128-GCM-SHA256"

nginx.conf

    # Replace blank variables with -
    #
    # map $foo $foo_h {
    #     default $foo;
    #     "" -;
    # }
    map $host $host_h { default $host; "" -; }
    map $https $https_h { default $https; "" -; }
    # realip eats the port.
    map $remote_port $remote_port_h { default $remote_port; "" -; }
    map $spdy $spdy_h { default $spdy; "" -; }
    log_format 11
        '$remote_addr $remote_port_h "$http_host" $server_addr $server_port '
        '"$server_name" $connection $connection_requests $https_h '
        '$ssl_protocol $spdy_h "$remote_user" [$time_iso8601] "$request" '
        '$status $bytes_sent $body_bytes_sent $gzip_ratio "$http_referer" '
        '"$http_user_agent" "$http_x_forwarded_for" "$ssl_cipher"';
    log_format lighttpd
        '$remote_addr $host_h $remote_user [$time_local] "$request" $status '
        '$body_bytes_sent "$http_referer" "$http_user_agent"';
    access_log /var/log/nginx/access.log lighttpd;
    access_log /var/log/nginx/access11.log 11;