here is my log file

format=%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] "%Req->reqpb.clf-request%" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length% "%Req->headers.referer%" "%Req->headers.user-agent%"
131.200.157.80 - - [09/Dec/2003:20:30:40 -0600] "GET /training/infosec2004/images/scenarios/8/travel_06.gif HTTP/1.1" 200 4021 "http://rain.ra.rockwell.com/training/infosec2004/english/training8.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; RA; T312461)"
131.200.157.80 - - [09/Dec/2003:20:30:40 -0600] "GET /training/infosec2004/images/scenarios/8/travel_02.gif HTTP/1.1" 200 2681 "http://rain.ra.rockwell.com/training/infosec2004/english/training8.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; RA; T312461)"


When I leave out logformat in the cfg file it says " detecting log file is NETSCAPE format.

If I delete the top line it detects it is NCSA combined format.

If I have my own log format line:  # LOGFORMAT  (%s %j %j [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %j)

In all cases I get this

F: Closing logfile access1.20031210.gz
S: Successful requests: 0
S: Redirected requests: 0
S: Failed requests: 0
S: Requests returning informational status code: 0
S: Status code not given: 0
S: Unwanted lines: 971511
S: Corrupt lines: 24
F: Opening Report.html as output file
analog: Warning R: Turning off empty time reports
  (For help on all errors and warnings, see docs/errors.html)
analog: Warning R: Turning off empty Host Report
analog: Warning R: Turning off empty Search Word Report

So anybody,  hints, help?

thanks
John

Reply via email to