请教下\x 开头的是啥编码? 站点日志好多这种, 也不像 url 和 utf8

This topic created in 1282 days ago, the information mentioned may be changed or developed.

@timestampNov 22, 2022 @ 09:15:[email protected]_id6d0763e7-2caa-4560-945b-5fe36db0c7cdagent.id0905ccb1-6212-41de-b807-6b7c38583139agent.nameBKbQvh10443agent.typefilebeatagent.version8.4.0ecs.version8.0.0event.original71.1.1.1 - - [19/Jul/2022:15:03:12 +0800] "\x03\x00\x00/\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 150 "-" "-"fields.tagnginx-tagloghost.nameBKbQvh10443input.typeloglog.file.path/var/wwwlogs/access.loglog.offset2,207message1.1.1.1 - - [19/Jul/2022:15:03:12 +0800] "\x03\x00\x00/\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 150 "-" "-"tags[NGINX-ACCESS, beats_input_codec_plain_applied]_id23TmnIQBm8tgvL1Dd91O_indexaccess-logscore -

x00

x00cookie

Jul

mstshash

5 replies • 2022-11-22 13:31:38 +08:00

nightwitch

Nov 22, 2022 via Android

纯字节表示，具体什么编码从一串字节里没法知道。数了下有奇数个字节，大概率 utf-8

sinksmell

Nov 22, 2022

hello, 这个是 utf8 编码，将 \x 替换成 % 就得到了常见的 url encode / 百分号编码。

```shell
$ python3
Python 3.10.8 (main, Oct 13 2022, 09:48:40) [Clang 14.0.0 (clang-1400.0.29.102)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> print ("\x03\x00\x00/\xE0\x00\x00\x00\x00\x00")
/à
>>>

```

\x 后面跟的是 16 进制数字，可以还原成 []byte / []rune 从而得到原始字符串

proxychains

Nov 22, 2022

@nightwitch 感谢回复

proxychains

Nov 22, 2022

@sinksmell 感谢回复

2NUT

Nov 22, 2022

hex