Re: [analog-help] FILETYPE reporting problems
On Tuesday, August 31, 2004 2:44 AM [GMT], r b5000 [EMAIL PROTECTED] wrote: I can't display all the extensions in a FILETYPE report I have tried changing the FLOOR for various reports, but I still get a at least 0,1% traffic shown. Below is what I see in a report and it says, NOT LISTED: 6 extensions. I want to know what those 6 extensions are. TYPEFLOOR 1r should show all file types that have at least 1 request. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Warning M
On Monday, August 30, 2004 10:48 PM [GMT], Linda Moorhouse [EMAIL PROTECTED] wrote: Here are the first few lines of the actual logfile. As I indicated, the analog file runs if there are no DNS commands in it, and I get an unresolved numerical addresses line in the index.html output. The error file is the M warning. If I run it with the DNS commands in analog, I get no output. Thanks for your help. Linda #Software: Microsoft Internet Information Services 5.0 #Version: 1.0 #Date: 2004-08-01 01:05:26 #Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status cs(User-Agent) 2004-08-01 01:05:26 66.197.169.165 - 207.246.83.4 80 GET /index.htm - 200 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 2004-08-01 02:24:12 64.68.82.185 - 207.246.83.4 80 GET /index.htm - 200 Googlebot/2.1+(+http://www.google.com/bot.html) But there aren't any bytes recorded in that logs - you're supposed to get a No bytes warning. I don't know why you don't get any output when you add your DNS commands - I get exactly the same output when I copy your DNS section into my Analog.cfg file. Have you saved those 6 lines into a logfile, and run Analog against that small logfile, and seen the same effect? Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Mailing list moving
Hello everyone. This mailing list is moving to a new address, [EMAIL PROTECTED], probably some time within the next 24 hours. You shouldn't need to do anything immediately. The old address will forward to the new one for some time. However, there may be some teething problems. The new address uses a better mailing list server (mailman). This means that you can configure your subscription through a web interface, but it also means that all the mailing list options have been reconfigured. If you notice any problems, please notify [EMAIL PROTECTED] -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Q on Directory Report inclusions
What kind of redirect did you use to do that? Did you have a regular expression to look for and remove pairs of tags from the requested URL? What does it look like? thanks, - Patrick On Aug 30, 2004, at 11:48 AM, Duke Hillard wrote: I previously encountered a similar situation. My solution was to include a server redirect in my server's config file. The redirect brought visitors to the correct page and the resulting log entries were parsed by Analog in a manner that satisfied me. HTH, -- Duke Patrick Robinson wrote: Is there a way to restrict what gets included in the Directory Report, by HTTP status code? That is, requests that result in a 206 Partial Content get included, but I want to exclude them. Rationale: I'm regularly seeing requests for URLs that look like this: /pubs/bfood/bs/348-907/348-907.html I don't know why, but some engine or other is putting b/b tags around portions of an otherwise valid URL. And my server often responds with a 206. These end up appearing in my Directory Report, and I'd rather they not. Thanks! -- Patrick Robinson AHNR Info Technology, Virginia Tech [EMAIL PROTECTED] + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Q on Directory Report inclusions
|Using Apache 2.x.xx, I added a line to the config file (/usr/local/apache2/conf/httpd.conf is default location). The line needs to appear below the DocumentRoot directive and within the Directory directive which relates to the DocumentRoot (||/usr/local/apache2/htdocs is default location).| | In your case, the line might look like this (all on one line) RedirectMatch 301 ^/pubs/bfood/bs(.*) http://host.domain.tld/pubs/foods$1 In the case of Apache, the ||RedirectMatch 301 accomplishes two tasks: (1) it brings the end user to the desired page and (2) it indicates to search engines that index/reindex the page that it is permanently moved (helps search engines correct their hyperlinks). || If you're using another server, check its documentation to see if it supports server redirection (many servers do). Of course, the syntax may change and file names/locations are likely to be different. HTH, -- Duke | Patrick Robinson wrote: What kind of redirect did you use to do that? Did you have a regular expression to look for and remove pairs of tags from the requested URL? What does it look like? thanks, - Patrick On Aug 30, 2004, at 11:48 AM, Duke Hillard wrote: I previously encountered a similar situation. My solution was to include a server redirect in my server's config file. The redirect brought visitors to the correct page and the resulting log entries were parsed by Analog in a manner that satisfied me. HTH, -- Duke Patrick Robinson wrote: Is there a way to restrict what gets included in the Directory Report, by HTTP status code? That is, requests that result in a 206 Partial Content get included, but I want to exclude them. Rationale: I'm regularly seeing requests for URLs that look like this: /pubs/bfood/bs/348-907/348-907.html I don't know why, but some engine or other is putting b/b tags around portions of an otherwise valid URL. And my server often responds with a 206. These end up appearing in my Directory Report, and I'd rather they not. Thanks! -- Patrick Robinson AHNR Info Technology, Virginia Tech [EMAIL PROTECTED] + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives + begin:vcard fn:Duke Hillard n:Hillard;Duke org:University of Louisiana at Lafayette;University Computing Support Services adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA email;internet:[EMAIL PROTECTED] title:University Webmaster tel;work:337.482.5763 url:http://www.louisiana.edu/ version:2.1 end:vcard
[analog-help] qdns + analog config example
Would someone have an example of using qdns w/ analog? Can it be done in one step with a batch file? I'm not sure I understand the examples given in the qdns.txt file. Cheers + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] FILETYPE reporting problems
thanks, that did the trick From: Aengus [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [analog-help] FILETYPE reporting problems Date: Tue, 31 Aug 2004 09:28:00 +0100 On Tuesday, August 31, 2004 2:44 AM [GMT], r b5000 [EMAIL PROTECTED] wrote: I can't display all the extensions in a FILETYPE report I have tried changing the FLOOR for various reports, but I still get a at least 0,1% traffic shown. Below is what I see in a report and it says, NOT LISTED: 6 extensions. I want to know what those 6 extensions are. TYPEFLOOR 1r should show all file types that have at least 1 request. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives + _ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] HELP!!
I am a beginner when it comes to your 5.32 software. I am trying to run a request report on specific pages on my intranet. However, it only seems to list the most requested pages, which is not what I want, as they are not the pages I am trying to report on. What do I do? If you require anymore info, do not hesitate to contact me. Many thanks Martin Poole PRO Ltd Address: 26-28 Bedford Row, Holborn, London, WC1R 4HE Tel: 020 7845 4200 Fax: 020 7845 4249 Website: www.PROltd.com Recruiting, retaining and developing outstanding people. This email is confidential and is intended for the addressee(s) only. If you are not the named addressee you may not use it, copy it or disclose it to any other person. If you have received this message in error please contact [EMAIL PROTECTED] Any views or opinions presented are solely those of the originator and do not necessarily represent those of PRO Ltd or any of its affiliates. On the basis that you are the intended recipient, then receipt of this e-mail by you represents your confirmation that you agree, or continue to agree, to be bound by our standard Terms and Conditions applicable to the transaction to which this e-mail relates. If you require a copy (or a replacement copy) of the applicable standard Terms and Conditions please e-mail your request by return. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns + analog config example
On Tuesday, August 31, 2004 4:09 PM [GMT], Aaron [EMAIL PROTECTED] wrote: Would someone have an example of using qdns w/ analog? Can it be done in one step with a batch file? I'm not sure I understand the examples given in the qdns.txt file. http://www.mail-archive.com/cgi-bin/htsearch?config=analog-help_lists_isite_networds=qdns Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns + analog config example
;) Thanks! Aengus wrote: On Tuesday, August 31, 2004 4:09 PM [GMT], Aaron [EMAIL PROTECTED] wrote: Would someone have an example of using qdns w/ analog? Can it be done in one step with a batch file? I'm not sure I understand the examples given in the qdns.txt file. http://www.mail-archive.com/cgi-bin/htsearch?config=analog-help_lists_isite_networds=qdns Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives + + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Q on Directory Report inclusions
I'm not sure why, but the pipe symbol was inadvertently added at the beginning and end of some of the lines in my last post. Please ignore the pipe symbols. -- Duke begin:vcard fn:Duke Hillard n:Hillard;Duke org:University of Louisiana at Lafayette;University Computing Support Services adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA email;internet:[EMAIL PROTECTED] title:University Webmaster tel;work:337.482.5763 url:http://www.louisiana.edu/ version:2.1 end:vcard
Re: [analog-help] HELP!!
You probably need to use FILEINCLUDE. To learn more about using this command, the place to go is the documentation page online at http://www.analog.cx/docs/include.html;. Hope that helps, -- Duke Martin Poole wrote: I am a beginner when it comes to your 5.32 software. I am trying to run a request report on specific pages on my intranet. However, it only seems to list the most requested pages, which is not what I want, as they are not the pages I am trying to report on. What do I do? If you require anymore info, do not hesitate to contact me. Many thanks Martin Poole PRO Ltd Address: 26-28 Bedford Row, Holborn, London, WC1R 4HE Tel: 020 7845 4200 Fax: 020 7845 4249 Website: www.PROltd.com Recruiting, retaining and developing outstanding people. This email is confidential and is intended for the addressee(s) only. If you are not the named addressee you may not use it, copy it or disclose it to any other person. If you have received this message in error please contact [EMAIL PROTECTED] Any views or opinions presented are solely those of the originator and do not necessarily represent those of PRO Ltd or any of its affiliates. On the basis that you are the intended recipient, then receipt of this e-mail by you represents your confirmation that you agree, or continue to agree, to be bound by our standard Terms and Conditions applicable to the transaction to which this e-mail relates. If you require a copy (or a replacement copy) of the applicable standard Terms and Conditions please e-mail your request by return. begin:vcard fn:Duke Hillard n:Hillard;Duke org:University of Louisiana at Lafayette;University Computing Support Services adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA email;internet:[EMAIL PROTECTED] title:University Webmaster tel;work:337.482.5763 url:http://www.louisiana.edu/ version:2.1 end:vcard
Re: [analog-help] Q on Directory Report inclusions
Oh, I see what you're suggesting. No, that won't work; that URI I gave was just an example. There are *lots* of different requests for many different URIs, and the way the tags get added is unpredictable. I need a rule-based approach. I was thinking you were suggesting somehow using mod_rewrite to remove the tags from the requested URI's -- which I'm sure it can probably do, if you're a mod_rewrite guru! :-) Basically, these requests are all invalid, and I don't know why they're getting requested. As far as I'm concerned, they should ALL return 404. I don't know why Apache is responding with a 206; I guess the client is sending Range headers in these requests, although I can't imagine why. Perhaps a better solution (better than exluding ALL 206 responses) would be to configure analog to exclude requests that appear to contain html tags! :-/ - Patrick On Aug 31, 2004, at 10:44 AM, Duke Hillard wrote: |Using Apache 2.x.xx, I added a line to the config file (/usr/local/apache2/conf/httpd.conf is default location). The line needs to appear below the DocumentRoot directive and within the Directory directive which relates to the DocumentRoot (||/usr/local/apache2/htdocs is default location).| | In your case, the line might look like this (all on one line) RedirectMatch 301 ^/pubs/bfood/bs(.*) http://host.domain.tld/pubs/foods$1 In the case of Apache, the ||RedirectMatch 301 accomplishes two tasks: (1) it brings the end user to the desired page and (2) it indicates to search engines that index/reindex the page that it is permanently moved (helps search engines correct their hyperlinks). || If you're using another server, check its documentation to see if it supports server redirection (many servers do). Of course, the syntax may change and file names/locations are likely to be different. HTH, -- Duke | Patrick Robinson wrote: What kind of redirect did you use to do that? Did you have a regular expression to look for and remove pairs of tags from the requested URL? What does it look like? thanks, - Patrick On Aug 30, 2004, at 11:48 AM, Duke Hillard wrote: I previously encountered a similar situation. My solution was to include a server redirect in my server's config file. The redirect brought visitors to the correct page and the resulting log entries were parsed by Analog in a manner that satisfied me. HTH, -- Duke Patrick Robinson wrote: Is there a way to restrict what gets included in the Directory Report, by HTTP status code? That is, requests that result in a 206 Partial Content get included, but I want to exclude them. Rationale: I'm regularly seeing requests for URLs that look like this: /pubs/bfood/bs/348-907/348-907.html I don't know why, but some engine or other is putting b/b tags around portions of an otherwise valid URL. And my server often responds with a 206. These end up appearing in my Directory Report, and I'd rather they not. Thanks! -- Patrick Robinson AHNR Info Technology, Virginia Tech [EMAIL PROTECTED] + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
RE: [analog-help] Warning M
Here are the first few lines of the actual logfile. As I indicated, the analog file runs if there are no DNS commands in it, and I get an unresolved numerical addresses line in the index.html output. The error file is the M warning. If I run it with the DNS commands in analog, I get no output. Thanks for your help. Linda #Software: Microsoft Internet Information Services 5.0 #Version: 1.0 #Date: 2004-08-01 01:05:26 #Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status cs(User-Agent) 2004-08-01 01:05:26 66.197.169.165 - 207.246.83.4 80 GET /index.htm - 200 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 2004-08-01 02:24:12 64.68.82.185 - 207.246.83.4 80 GET /index.htm - 200 Googlebot/2.1+(+http://www.google.com/bot.html) 20 On Monday, August 30, 2004 3:08 PM [GMT], [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The only thing that I can think of is that it's some sort of LOGFORMAT error. Can you create a 3 or 4 line logfile that does this, and then post those logile lines? Aengus A logfile that does what? I don't understand. Thanks. A 3 line logfile that throws up this No Bytes error when you run Analog against it. The No Bytes warning occurs when Analog doesn't see a field in the logfile that indicates the number of bytes transferred. But Analogs understanding of the logformat won't change when you do DNS or don't do DNS, so there's no obvious reason why you should see that change in the output of Analog. If you can reproduce the effect on a small logfile, someone may be able to figure out what's going on. Aengus +--- +- | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +--- +- + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
On Fri, 27 Aug 2004, Uriel Wittenberg wrote: OK, I see what I was asking for is simplistic and I guess there's no obvious rule for combining synonyms for the same host or referrer, as Quentin says. So now I'm looking at the more modest goal of just changing http://www.urielw.com to http://urielw.com in the Referring Site Report. DOMALIAS http://www.urielw.com* http://urielw.com* does nothing. REFSITEALIAS http://www.urielw.com* http://urielw.com* does the translation, but I end up with 2 separate lines for http://urielw.com/ . How can I get them combined? Further advice gratefully appreciated. (I'll also want to do the same for the Referrer Report.) Use REFALIAS. That combines them in all reports. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
Thanks! That works perfectly. - Original Message - From: Stephen Turner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, August 29, 2004 8:52 AM Subject: Re: [analog-help] http://www.[anysite] = http://[anysite] now I'm looking at the more modest goal of just changing http://www.urielw.com to http://urielw.com in the Referring Site Report. Use REFALIAS. That combines them in all reports. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Warning M
I'm sure the answer is in the documents, but I cannot figure out what to do when I get the message that lines in the logfile contain no bytes. If I remove all of the DNS commands, which are DNS WRITE DNSFILE dnscache.txt DNSLOCKFILE dnslock.txt DNSGOODHOURS 100 DNSBADHOURS 500 CACHEFILE none CACHEOUTFILE none DIRSUFFIX index.html # UNCOMPRESS *.gz,*.Z gzip -cd I don't get that message, but I also get no domains, etc. If I leave in the DNS commands, I get nothing except the error message. Please direct me to the documentation that will solve the problem. Thank you. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] http://www.[anysite] = http://[anysite]
I know this is not the place to inquire about regular expressions, but I'm only trying to tell analog that http://www.[anysite] is the same as http://[anysite] Or to be more precise, I want http://[anysite] to be translated to http://www.[anysite]. I tried REFSITEALIAS REGEXPI:^http://(www\.)?* http://www.* but that doesn't work. Forgive me, I'm not experienced with regexp's. Help appreciated. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] DIRSUFFIX converts wrong way
The command, DIRSUFFIX index.htm changes \xyz\index.htm to \xyz\ . But this results in links in the request report that don't work for me. (I'm using Windows.) I'd like the translation to go the other way: changing \xyz\ to \xyz\index.htm . Could someone advise? Thanks in advance. Uriel + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] DIRSUFFIX converts wrong way
On Fri, 27 Aug 2004, Uriel Wittenberg wrote: The command, DIRSUFFIX index.htm changes \xyz\index.htm to \xyz\ . But this results in links in the request report that don't work for me. (I'm using Windows.) I'd like the translation to go the other way: changing \xyz\ to \xyz\index.htm . Could someone advise? I think you're a bit confused. If /xyz/ is a broken link, then it shouldn't translate to anything else. It sounds like you need to configure your server. It should respond to /xyz/ by serving the document /xyz/index.htm. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
On Fri, 27 Aug 2004, Uriel Wittenberg wrote: I know this is not the place to inquire about regular expressions, but I'm only trying to tell analog that http://www.[anysite] is the same as http://[anysite] Or to be more precise, I want http://[anysite] to be translated to http://www.[anysite]. I think you want it the other way round. Otherwise http://www.site.com would translate to http://www.www.site.com. And you don't need regular expressions. Just use REFALIAS http://www.* http://* -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] DIRSUFFIX converts wrong way
My server does serve /xyz/index.htm , as it should, when /xyz/ is requested. No problem there. I'm running analog on my local PC and looking at reports there. When I have /xyz/ in the report and click on that link, I'd like it to open the /xyz/index.htm on my local disk. (Incidentally, I have the command BASEURL C:/uwlive so most report links work.) - Original Message - From: Stephen Turner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 27, 2004 10:08 AM Subject: Re: [analog-help] DIRSUFFIX converts wrong way I think you're a bit confused. If /xyz/ is a broken link, then it shouldn't translate to anything else. It sounds like you need to configure your server. It should respond to /xyz/ by serving the document /xyz/index.htm. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
REFALIAS http://www.* http://* But that translates http://www.[anysite] to http://[anysite] , which is sometimes wrong. I'd like the translation to go the other way. Otherwise http://www.site.com would translate to http://www.www.site.com. It's to avoid that that I need regular expressions. - Original Message - From: Stephen Turner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 27, 2004 10:15 AM Subject: Re: [analog-help] http://www.[anysite] = http://[anysite] I think you want it the other way round. Otherwise http://www.site.com would translate to http://www.www.site.com. And you don't need regular expressions. Just use REFALIAS http://www.* http://* + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
On Fri, 27 Aug 2004, Uriel Wittenberg wrote: Date: Fri, 27 Aug 2004 10:23:57 -0400 From: Uriel Wittenberg [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [analog-help] http://www.[anysite] = http://[anysite] REFALIAS http://www.* http://* But that translates http://www.[anysite] to http://[anysite] , which is sometimes wrong. Hi- It's also sometimes wrong to add a www. For instance, what if it's a page on MIT's web site? (http://web.mit.edu/). There really is no easy way to combine the entries. I'd like the translation to go the other way. Otherwise http://www.site.com would translate to http://www.www.site.com. It's to avoid that that I need regular expressions. I'm not sure if Analog supports full perl regular expressions, but if it does: http://(?!www\.).*\.com will match a URL that does not begin with www. It might be advantageous to use this instead: http://(?!www\.)[^.]+\.com That will match only URLs with two parts in the hostname, hopefully fixing at least some of the problems that result from prepending www. willy-nilly. --Quentin + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
On Fri, 27 Aug 2004, Uriel Wittenberg wrote: REFALIAS http://www.* http://* But that translates http://www.[anysite] to http://[anysite] , which is sometimes wrong. Both ways round are technically wrong, but mine is right much more often. Yours translates http://secure.example.com/ to http://www.secure.example.com/ and http://www2.mit.edu/ to http://www.www2.mit.edu/ for example. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
On Fri, 27 Aug 2004, Quentin Smith wrote: Date: Fri, 27 Aug 2004 10:31:53 -0400 (EDT) From: Quentin Smith [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [analog-help] http://www.[anysite] = http://[anysite] I'm not sure if Analog supports full perl regular expressions, but if it does: http://(?!www\.).*\.com will match a URL that does not begin with www. Silly me, assuming all the URLs are .com's. http://(?!www\.)* It might be advantageous to use this instead: http://(?!www\.)[^.]+\.com Not sure how to do this without a .com, perhaps something like: http://(?!www\.)[^.]+\.[a-zA-Z]+ That will match only URLs with two parts in the hostname, hopefully fixing at least some of the problems that result from prepending www. willy-nilly. --Quentin + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
On Fri, 27 Aug 2004, Quentin Smith wrote: I'm not sure if Analog supports full perl regular expressions Yes, it does. But that doesn't avoid the fact that it's really the wrong thing to do here. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] DIRSUFFIX converts wrong way
On Fri, 27 Aug 2004, Uriel Wittenberg wrote: My server does serve /xyz/index.htm , as it should, when /xyz/ is requested. No problem there. I'm running analog on my local PC and looking at reports there. When I have /xyz/ in the report and click on that link, I'd like it to open the /xyz/index.htm on my local disk. Oh, I understand now. Well, in that case something like FILEALIAS REGEXP:(.*)/$ $1/index.htm (and no DIRSUFFIX) should work. (I haven't tested this, so it may not be exactly right). -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] DIRSUFFIX converts wrong way
FILEALIAS REGEXP:(.*)/$ $1/index.htm That works perfectly. - Original Message - From: Stephen Turner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 27, 2004 10:45 AM Subject: Re: [analog-help] DIRSUFFIX converts wrong way Oh, I understand now. Well, in that case something like FILEALIAS REGEXP:(.*)/$ $1/index.htm (and no DIRSUFFIX) should work. (I haven't tested this, so it may not be exactly right). + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] http://www.[anysite] = http://[anysite]
OK, I see what I was asking for is simplistic and I guess there's no obvious rule for combining synonyms for the same host or referrer, as Quentin says. So now I'm looking at the more modest goal of just changing http://www.urielw.com to http://urielw.com in the Referring Site Report. DOMALIAS http://www.urielw.com* http://urielw.com* does nothing. REFSITEALIAS http://www.urielw.com* http://urielw.com* does the translation, but I end up with 2 separate lines for http://urielw.com/ . How can I get them combined? Further advice gratefully appreciated. (I'll also want to do the same for the Referrer Report.) - Original Message - From: Stephen Turner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 27, 2004 10:39 AM Subject: Re: [analog-help] http://www.[anysite] = http://[anysite] Both ways round are technically wrong, but mine is right much more often. Yours translates http://secure.example.com/ to http://www.secure.example.com/ and http://www2.mit.edu/ to http://www.www2.mit.edu/ for example. - Original Message - From: Quentin Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 27, 2004 10:31 AM Subject: Re: [analog-help] http://www.[anysite] = http://[anysite] It's also sometimes wrong to add a www. For instance, what if it's a page on MIT's web site? (http://web.mit.edu/). There really is no easy way to combine the entries. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Thread safe?
Thanks Jeremy. PB Jeremy Wadsack wrote: You can run multiple Analog processes without conflict on the same data sources as long as they write to different files. If you are writing back DNS lookups, the second process that starts will failover to read mode and only read DNS entries that are already in the DNS cache file. If you were to try to run simultaneous instances of Analog writing to the same output file, the system should block the second process from writing to the file. E-mail is an informal method of communication and may be subject to data corruption, interception and unauthorised amendment for which Digital Bridges Ltd will accept no liability. Therefore, it will normally be inappropriate to rely on information contained on e-mail without obtaining written confirmation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Thread safe?
Jeremy is right, but that's usually not the best way to do it. Analog is CPU and disk intensive, so it's usually better to arrange for the two processes to run consecutively, not concurrently. You can do this with a simple shell script / batch file. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Thread safe?
Might be a stupid question but is Analog thread safe? If I run 2 instances of analog against the same log files will there be a problem? I have a 2 config files writing reports to different locations for each instance I could just try this but the problems could be to subtle to spot PB E-mail is an informal method of communication and may be subject to data corruption, interception and unauthorised amendment for which Digital Bridges Ltd will accept no liability. Therefore, it will normally be inappropriate to rely on information contained on e-mail without obtaining written confirmation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Thread safe?
You can run multiple Analog processes without conflict on the same data sources as long as they write to different files. If you are writing back DNS lookups, the second process that starts will failover to read mode and only read DNS entries that are already in the DNS cache file. If you were to try to run simultaneous instances of Analog writing to the same output file, the system should block the second process from writing to the file. -- Jeremy Wadsack Seven Simple Machines Paul Barclay wrote: Might be a stupid question but is Analog thread safe? If I run 2 instances of analog against the same log files will there be a problem? I have a 2 config files writing reports to different locations for each instance I could just try this but the problems could be to subtle to spot PB + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] log format for realserver *.rm files
Is anyone familiar with Helix audio file server log format? Here's an actual log entry from the rmaccess.log 192.245.136.18 - - [16/Aug/2004:10:00:56 -0400] GET t5bmnassk1/braff_ruby.rm RTSP/1.0 200 212877 [WinNT_5.1_6.0.12.883_RealPlayer_RN30BB_en-us_UNK] [f44fc2e1 -dfcc-11d8-e519-b76e8bb626c6] [Stat1: 307 0 0 0 0 32_Kbps_Music_High_Response_-_RealAudio] [Stat2: 32148 125715 0 0 0 0 0 0 0 0 0 32_Kbps_Music_High_Response_-_RealAudio] 16297931 1262 13 00 1 Here's what my boss had set up for a LOGFORMAT, but it's not working anymore, if it ever did work: LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j] %j %j %j %j %j %j) LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j][%j] %j %j %j %j %j %j) LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j][%j]] %j %j %j %j %j %j) The apache access_log file format looks different for the same file types. I need to capture the adderley_cannonball.rm and count requests for these files. I'm not getting any output whatsoever now. Last time I got output was July 28, and I've pretty much destroyed that analog.cfg file since then, and unable to recreate the format. Can anyone help me figure this out? If I try to count *.rm files with the apache log format (autodetected), I get nothing. Using the LOGFORMAT (above), I'm getting nothing. I feel like banging my head up against the wall for the rest of the day. I've been messing with this for 2 weeks now. -- apache access_log entry for .rm file -- 192.245.136.18 - - [16/Aug/2004:09:57:39 -0400] POST/Z-RSA/Get?f=adderley_cannonball.rm HTTP/1.1 200 60 Stephen Turner wrote: (Astute readers will be wondering how I managed to deduce the format of fields that didn't appear in John's sample. That's because I'm already familiar with .nlf files: they're produced by ClickTracks). + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] log format for realserver *.rm files
Frank, Thanks, I did look at the Helix site, and I'm going to get familiar with it. Unbelievably, our license expired last night, and my boss is setting up the Helix server on one of our SUN servers (moving it off the Linux server). I still have to eventually figure out the reports, so I'll keep plugging along. I can't generate any more stats though, so I'll have to work with the ones I have. From the Helix site, I figured out he set up logging style 5, and I'm going to read up and check the LOGFORMAT for that logging style. I tried Ben's format too, but it didn't work -- my cfg may be wrong at this point. I'll let you know when I get a report. Jeanne D.B.R. Barker wrote: This may be complete rubbish, but try the following: LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j -%j] %j %u/%r %j %c %b [%B][%j] [%j] [%j: %j %j %j %j %j %j] [%j: %j %j %j %j %j %j %j %j %j %j %j %j] %j %j %j %j %j) Frank Hare wrote: The Helix book as well as the online help within the Helix Admin web portal contains good info. Or you could try here: http://service.real.com/help/library/guides/helixuniversalserver/realsrvr.htm The logs don't work quite the same as weblogs, Helix makes multiple entries for a play request, kinda like a start and a stop with play details. Be carefull about double or triple counting these. Watch the logs as you hit with a request and close the request and you'll understand more about what it's doing. __ Is anyone familiar with Helix audio file server log format? Here's an actual log entry from the rmaccess.log 192.245.136.18 - - [16/Aug/2004:10:00:56 -0400] GET t5bmnassk1/braff_ruby.rm RTSP/1.0 200 212877 [WinNT_5.1_6.0.12.883_RealPlayer_RN30BB_en-us_UNK] [f44fc2e1 -dfcc-11d8-e519-b76e8bb626c6] [Stat1: 307 0 0 0 0 32_Kbps_Music_High_Response_-_RealAudio] [Stat2: 32148 125715 0 0 0 0 0 0 0 0 0 32_Kbps_Music_High_Response_-_RealAudio] 16297931 1262 13 00 1 Here's what my boss had set up for a LOGFORMAT, but it's not working anymore, if it ever did work: LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j] %j %j %j %j %j %j) LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j][%j] %j %j %j %j %j %j) LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j][%j]] %j %j %j %j %j %j) The apache access_log file format looks different for the same file types. I need to capture the adderley_cannonball.rm and count requests for these files. I'm not getting any output whatsoever now. Last time I got output was July 28, and I've pretty much destroyed that analog.cfg file since then, and unable to recreate the format. Can anyone help me figure this out? If I try to count *.rm files with the apache log format (autodetected), I get nothing. Using the LOGFORMAT (above), I'm getting nothing. I feel like banging my head up against the wall for the rest of the day. I've been messing with this for 2 weeks now. -- apache access_log entry for .rm file -- 192.245.136.18 - - [16/Aug/2004:09:57:39 -0400] POST/Z-RSA/Get?f=adderley_cannonball.rm HTTP/1.1 200 60 + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] log format for realserver *.rm files
On Wednesday, August 18, 2004 2:05 PM [GMT], Jeanne Ilchuk [EMAIL PROTECTED] wrote: Here's what my boss had set up for a LOGFORMAT, but it's not working anymore, if it ever did work: LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j] %j %j %j %j %j %j) LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j][%j] %j %j %j %j %j %j) LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] [%j] [%j][%j]] %j %j %j %j %j %j) If everything after the %B is junk, you don't need seperate %j entries. I need to capture the adderley_cannonball.rm and count requests for these files. LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j] %j %u/%r %j %c %b [%B] %j) will parse the sample line that you provided, but it shows braff_ruby.rm in the request report (maybe you sent the wrong line?). Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Mutilple Request reports
Hi, Is it possible to do multiple Request Reports but have each report handle different parameters? For example one Request report would show the most popular pages hit of a particular pattern and the other report would do the same but with a different file name pattern. thanks Paul E-mail is an informal method of communication and may be subject to data corruption, interception and unauthorised amendment for which Digital Bridges Ltd will accept no liability. Therefore, it will normally be inappropriate to rely on information contained on e-mail without obtaining written confirmation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Mutilple Request reports
On Wed, 18 Aug 2004, Paul Barclay wrote: Hi, Is it possible to do multiple Request Reports but have each report handle different parameters? Only by running analog twice. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Mutilple Request reports
Stephen Turner wrote: On Wed, 18 Aug 2004, Paul Barclay wrote: Hi, Is it possible to do multiple Request Reports but have each report handle different parameters? Only by running analog twice. Thanks Stephen. PB E-mail is an informal method of communication and may be subject to data corruption, interception and unauthorised amendment for which Digital Bridges Ltd will accept no liability. Therefore, it will normally be inappropriate to rely on information contained on e-mail without obtaining written confirmation. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Browser Processing Question
Title: Browser Processing Question Is it possible to configure the Browser %B logformat command to group types of browsers? Most of the browsers hitting our server take the format: String:ID# However there are a few that don't have the :ID# component. Is there a way to say ignore the :ID# if it exists and if it doesn't use the whole string? Thanks for your help Kim Stephenson
Re: [analog-help] Browser Processing Question
On Mon, 16 Aug 2004, Kim Stephenson wrote: Is it possible to configure the Browser %B logformat command to group types of browsers? Most of the browsers hitting our server take the format: String:ID# However there are a few that don't have the :ID# component. Is there a way to say ignore the :ID# if it exists and if it doesn't use the whole string? Yes, that's what BROWALIAS is for. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
RE: [analog-help] Browser Processing Question
Title: RE: [analog-help] Browser Processing Question Great thanks Steve. -Original Message- From: Stephen Turner [mailto:[EMAIL PROTECTED]] Sent: Monday, August 16, 2004 9:58 AM To: '[EMAIL PROTECTED]' Subject: Re: [analog-help] Browser Processing Question On Mon, 16 Aug 2004, Kim Stephenson wrote: Is it possible to configure the Browser %B logformat command to group types of browsers? Most of the browsers hitting our server take the format: String:ID# However there are a few that don't have the :ID# component. Is there a way to say ignore the :ID# if it exists and if it doesn't use the whole string? Yes, that's what BROWALIAS is for. -- Stephen Turner, Cambridge, UK http://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Hosts Question.
I am having a hard time getting a handle on Hosts.. I took a part of a log file and imported it in to Excel and sorted the IP address's and got 13000+ different IP address's. When I analyzed the file I cannot get over 111 Distinct hosts... the other entries look approximately correct... Successful requests: 6,724 Successful requests for pages: 4,233 Failed requests: 5,178 Redirected requests: 16 Distinct files requested: 4,893 Distinct hosts served: 111 Unwanted logfile entries: 3,081 Data transferred: 1.02 gigabytes This snippet, if analyzed should have 6 hosts... All requests are for html files so should be counted... 217.42.138.136 - - [01/Mar/2004:01:00:27 -0600] GET /raised/ HTTP/1.1 200 10997 http://www.myweb.com/index.html Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 130.151.45.32 - - [01/Mar/2004:01:00:27 -0600] GET /support/index.html HTTP/1.0 200 5431 - Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; RA; .NET CLR 1.0.3705) 217.42.138.136 - - [01/Mar/2004:01:00:27 -0600] GET /logic/order.html HTTP/1.1 200 24904 http://www.myweb.com/index2.html Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 219.166.138.158 - - [01/Mar/2004:01:00:27 -0600] GET /manuals/1756653.html HTTP/1.1 - 17844 http://www.myweb.com/manuals/ Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) 203.129.207.162 - - [01/Mar/2004:01:00:27 -0600] GET /catalogs/index.html HTTP/1.0 200 1125 http://www.myweb.com/catalogs/dnet.html Mozilla/4.0 (compatible; MSIE 5.01; Windows 98) 62.190.106.161 - - [01/Mar/2004:01:00:27 -0600] GET /logic/ HTTP/1.0 200 13931 http://www.google.com/search?q=rslogix+5000+demoie=UTF-8oe=UTF-8hl=nllr= Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 4.0; Q312461; Holec Holland N.V.) 194.151.13.146 - - [01/Mar/2004:01:00:28 -0600] GET /industrial/pdf/idc.html HTTP/1.0 200 32329 - Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Fetch API Request
Re: [analog-help] Hosts Question.
On Mon, 16 Aug 2004, John G Doke wrote: This snippet, if analyzed should have 6 hosts... All requests are for html files so should be counted... I analysed it and it did have six hosts. What's the problem with it? -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Hosts Question.
Do you have 13,000 IP numbers in Excel or 13,000 resolved IP addresses? Which do you have in analog? You could have a bunch of IP numbers in Excel that resolve to a much small number of IP addresses. Also, what time frame is covered in your logfile and what time frame is covered by your analysis. If your logfile is for a year, and you analyze for a day or a week, the number of distinct hosts served for a day or a week is likely to be less than the total number of hosts contained in the log file. Maybe you have a HOSTINCLUDE or HOSTEXCLUDE command somewhere that effects your results. HTH, -- Duke John G Doke wrote: I am having a hard time getting a handle on Hosts.. I took a part of a log file and imported it in to Excel and sorted the IP address's and got 13000+ different IP address's. When I analyzed the file I cannot get over 111 Distinct hosts... the other entries look approximately correct... Successful requests: 6,724 Successful requests for pages: 4,233 Failed requests: 5,178 Redirected requests: 16 Distinct files requested: 4,893 Distinct hosts served: 111 Unwanted logfile entries: 3,081 Data transferred: 1.02 gigabytes This snippet, if analyzed should have 6 hosts... All requests are for html files so should be counted... 217.42.138.136 - - [01/Mar/2004:01:00:27 -0600] GET /raised/ HTTP/1.1 200 10997 http://www.myweb.com/index.html; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 130.151.45.32 - - [01/Mar/2004:01:00:27 -0600] GET /support/index.html HTTP/1.0 200 5431 - Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; RA; .NET CLR 1.0.3705) 217.42.138.136 - - [01/Mar/2004:01:00:27 -0600] GET /logic/order.html HTTP/1.1 200 24904 http://www.myweb.com/index2.html; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 219.166.138.158 - - [01/Mar/2004:01:00:27 -0600] GET /manuals/1756653.html HTTP/1.1 - 17844 http://www.myweb.com/manuals/; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322) 203.129.207.162 - - [01/Mar/2004:01:00:27 -0600] GET /catalogs/index.html HTTP/1.0 200 1125 http://www.myweb.com/catalogs/dnet.html; Mozilla/4.0 (compatible; MSIE 5.01; Windows 98) 62.190.106.161 - - [01/Mar/2004:01:00:27 -0600] GET /logic/ HTTP/1.0 200 13931 http://www.google.com/search?q=rslogix+5000+demoie=UTF-8oe=UTF-8hl=nllr=; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 4.0; Q312461; Holec Holland N.V.) 194.151.13.146 - - [01/Mar/2004:01:00:28 -0600] GET /industrial/pdf/idc.html HTTP/1.0 200 32329 - Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Fetch API Request begin:vcard fn:Duke Hillard n:Hillard;Duke org:University of Louisiana at Lafayette;University Computing Support Services adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA email;internet:[EMAIL PROTECTED] title:University Webmaster tel;work:337.482.5763 url:http://www.louisiana.edu/ version:2.1 end:vcard
Re: [analog-help] qdns.exe produces bad DNS file
Just for completeness, I brought a copy of qdns.exe home, and tried it on my XP machine, and it did work, so whatever caused it not to work for you isn't necessarily a problem with the OS. Thanks Aengus! Your message prompted me to re-try with as simple a setup as possible. This time qdns worked. I don't feel like exploring what made it mess up before but it may have been my attempt to use separate directories. I generally try to keep MY files (produced by me), e.g. config files, separate from app files. Actually, it's surprising ANALOG itself doesn't really make this possible. Anyway, after my simplifications, qdns seems to be working for me. Thanks again, Uriel + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
On Sun, 15 Aug 2004, Uriel Wittenberg wrote: I generally try to keep MY files (produced by me), e.g. config files, separate from app files. Actually, it's surprising ANALOG itself doesn't really make this possible. What do you mean? The default location is a compile-time option, and you can specify any location at runtime. Linux distributions typically have the default configuration file in /etc and the binary in /usr/bin. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
I'm sorry -- I didn't read the documentation carefully enough. (I was misled by the mandatory configuration file.) I see now I can specify \MYDIR\analog.cfg via: analog -G +g\MYDIR\analog.cfg Thanks Stephen! Uriel + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Analog .pl error
Hi all. I am running Analog on a Windows 2003 Server machine. I dont have access to the actual machine unformatunately, but I have a cgi-bin directory with full permissions. Upon running analog from the anlgform.html form i get 'c:\...\cgi-bin\analog\anlgform.pl' script produced no output (actual path omitted). Please help! I have set everything up correctly and double and triple checked it! Thanks!
Re: [analog-help] log format, Large number of corrupt lines...
On Thu, 12 Aug 2004, John G Doke wrote: I believe I have the log format correctly and for a month I will get 6 or 7 of these errors.. What I don't get is that the reported log format is different than the format I specified.. Or is it trying to tell me what the format of the file really is??? All the lines in the file look correct. While running analog: === analog: Warning L: Large number of corrupt lines in logfile C:\logs\G2004-03-27_05-00-28_to_2004-03-27_06-00-04.nlf: turn debugging on or try different LOGFORMAT Current logfile format: %U\t%c\t%S\t%j\t%j\t%r\t\t\t%j\n From analog.cfg: LOGFORMAT (%U\t%c\t%s\t%j\t%f\t%r\t\t\t%B) It's telling you what it translated the log format to internally. You didn't want any data on referrers or browsers, so it changed them to %j and then didn't bother to read them. I think your problem is that you left out a couple of fields near the end. After the request field you need the query string, otherwise any lines with something in that field will be corrupt. After that comes the cookies -- maybe it's always blank in this logfile, but we might as well put it in for completeness. So the whole log format should look like this: LOGFORMAT %U\t%c\t%S\t%j\t%f\t%r\t%q\t%u\t%B (Astute readers will be wondering how I managed to deduce the format of fields that didn't appear in John's sample. That's because I'm already familiar with .nlf files: they're produced by ClickTracks). -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] request report question
What is the most elegant way to exclude robots from the request report? Thank you, Boris. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] request report question
ROBOTINCLUDE and ROBOTEXCLUDE won't help in this situation because they determine which browsers count as robots in the Operating System Report. A robot (for example, Googlebot) appears in server logs as an User Agent or Browser. So, BROWINCLUDE and BROWEXCLUDE are the way to include and exclude browsers/robots from your reports. There isn't one command that will exclude browsers exclusively from the Request Report. If you want browsers included in other reports, you must run analog twice (once without browsers/robots for the Request Report; then run again with browsers/robots for other reports). The analog documentation on this topic should be useful (http://www.analog.cx/docs/include.html). If you are looking for a list of robots, you might adapt Jeremy Wadsack's list of ROBOTINCLUDE commands. His list can be accessed from the analog helper applications page (http://www.analog.cx/helpers/). HTH, -- Duke Boris Pritychenko wrote: What is the most elegant way to exclude robots from the request report? Thank you, Boris. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives + begin:vcard fn:Duke Hillard n:Hillard;Duke org:University of Louisiana at Lafayette;University Computing Support Services adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA email;internet:[EMAIL PROTECTED] title:University Webmaster tel;work:337.482.5763 url:http://www.louisiana.edu/ version:2.1 end:vcard
[analog-help] Request report question
Is it possible to limit the displayed requests to a specific directory? I did a directory report but that just gives me a total number for the directory. Thanks, Carl ___ Carl Snow Purdue University Libraries Network Access Librarian [EMAIL PROTECTED] 765-494-2764 + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Request report question
On Thursday, August 12, 2004 6:09 PM [GMT], Snow, Carl E. [EMAIL PROTECTED] wrote: Is it possible to limit the displayed requests to a specific directory? I did a directory report but that just gives me a total number for the directory. FILEINCLUDE /directory/* Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Request report question
On Thu, 12 Aug 2004, Aengus wrote: On Thursday, August 12, 2004 6:09 PM [GMT], Snow, Carl E. [EMAIL PROTECTED] wrote: Is it possible to limit the displayed requests to a specific directory? I did a directory report but that just gives me a total number for the directory. FILEINCLUDE /directory/* FILEINCLUDE limits the whole report to just that directory. If you want to limit just the Request Report, you need REQINCLUDE instead. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] log format, Large number of corrupt lines...
I believe I have the log format correctly and for a month I will get 6 or 7 of these errors.. What I don't get is that the reported log format is different than the format I specified.. Or is it trying to tell me what the format of the file really is??? All the lines in the file look correct. While running analog: === analog: Warning L: Large number of corrupt lines in logfile C:\logs\G2004-03-27_05-00-28_to_2004-03-27_06-00-04.nlf: turn debugging on or try different LOGFORMAT Current logfile format: %U\t%c\t%S\t%j\t%j\t%r\t\t\t%j\n From analog.cfg: LOGFORMAT (%U\t%c\t%s\t%j\t%f\t%r\t\t\t%B) 1080366289200194.151.13.146GET/db/encompass/bps_dir_update.show_pagex_directory_id=2434Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Fetch API Request 1080366289200192.83.106.1GET/products.htmlMozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; T312461) 1080366289200209.171.42.178GEThttp://shop.rockwellautomation.com/RA/frameset/right.jsp/db/extwww/owa/unified_reg_utils.ur_logoutbv_sessionid=0685447564.1080366423bv_engineid=cadckcfhegmhbekgcfkckcgi.0Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; GomezAgent 1.0) 108036628920063.99.105.162GET/catalogs/b113/slc/Mozilla/3.01 (compatible;) 1080366290200194.151.13.146GET/db/encompass/bps_dir_update.show_pagex_directory_id=2434Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Microsoft Scheduled Cache Content Download Service 1080366291200194.151.13.146GET/db/encompass/bps_dir_update.show_pagex_directory_id=2056Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Fetch API Request
Re: [analog-help] qdns.exe produces bad DNS file
On Tuesday, August 10, 2004 3:23 AM [GMT], Uriel Wittenberg [EMAIL PROTECTED] wrote: It simply doesn't work. I'm on WinXP Home, and I seem to be running it correctly. Just for completeness, I brought a copy of qdns.exe home, and tried it on my XP machine, and it did work, so whatever caused it not to work for you isn't necessarily a problem with the OS. Aengus C:\Tempqdns /d dns.dns /l ex040722.log /y 192.168.0.1 AnalogX QuickDNS (QDNS) - Quick DNS version 2.00 (Release) [08/12/2000] The latest version is always available at http://www.analogx.com/ DNS IP Set to 192.168.0.1 134 [0.0200 secs] DNS Entries loaded... 0 [0.0500 secs] Log Entries loaded... (4248) 134 [0.0610 secs] Queued for lookup... 134 [ 27.9700 secs] Entries processed (134 resolved)... 134 [0. secs] Entries saved... 134 [ 28.1110 secs] Completed (-134 unresolved)... + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] OUTFILE
There always comes al line with: [not listed: x organisations] How can I make it, that all be shown? -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig kabellos http://www.gmx.net/de/go/dsl + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] OUTFILE
Putting: ORGFLOOR 1r into your config file should do it See: http://www.analog.cx/docs/othreps.html#FLOOR for more info Ben On Aug 11 2004, Dagmar Kroeker wrote: There always comes al line with: [not listed: x organisations] How can I make it, that all be shown? + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] OUTFILE
Thank you very much! -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig kabellos http://www.gmx.net/de/go/dsl + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
On Tuesday, August 10, 2004 3:23 AM [GMT], Uriel Wittenberg [EMAIL PROTECTED] wrote: It simply doesn't work. I'm on WinXP Home, and I seem to be running it correctly. I run it on Win2K, and I always had to explicitly specify the DNS server, even though the documentation doesn't say that. I think that the application probably relies on some OS specific functionality. As it predates Windows XP, it wouldn't surprise me that it mightn't work on XP. Perhaps Stephen can add that to the helper page documenation. I chose qdns simply because it's the first Windows app at http://www.analog.cx/helpers/index.html#dns. Are the apps there evaluated somewhere? No. ReportMagic is the only helper app that is widely used, and has it's own mailing list. QuickDNS used to be the only DNS helper for Windows (as far as I can remember - most of the DNS tools were originally written for Unix) but as someone else pointed out rdnslogs has been ported to Windows and works well. DNS lookups aren't a major issue for many Analog users, so the issue doesn't come up on the mailing list very often. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] OUTFILE
I want to produce all in one step. -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig kabellos http://www.gmx.net/de/go/dsl + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] OUTFILE
On Mon, 9 Aug 2004, Dagmar Kroeker wrote: I want to produce all in one step. You can't. You have to run analog several times, once for each output file you want to create. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] OUTFILE
There may be a better way, but if you make a batch file with the following (or equivalent, depending on your OS - this is for a windows) call analog.exe -G +gconfig1.cfg call analog.exe -G +gconfig2.cfg call analog.exe -G +gconfig3.cfg This should do what you want Ben + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Logformat to strip blanks spaces
On Monday, August 09, 2004 2:06 AM [GMT], Raji Arulambalam [EMAIL PROTECTED] wrote: Hi what LogFormat settings could I use to either ignore the browser or include it.? Can someone give me an example. I have read the pages of logformat at the Analog site. You might not be able to, based on the example you provided. The LOGFORMAT specifies a series of tokens, and Analog parses each line, dividing it into each token, based on whatever separator character occurs between each token in the LOGFORMAT. Normally, a space is used as the separator, so you have %S %u %Y, etc. If a token is going to have spaces within it, such as the username or the Browser string, then you have to either get your server to quote the string, or convert the spaces to something else (+, for example). Alternatively, if that particular token is the last token in the log entry, you can tell Analog to just use the rest of the line. The problem here is that your Browser string isn't quoted, and it isn't a predictable number of words long. Because Agent strings are usually of the form Browser (details) You might get away with something like %S %u %j (%j) %j %Y., but that might not work for everything. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] qdns.exe produces bad DNS file
QuickDNS, the Analog helper app (http://www.analogx.com/contents/download/network/qdns.htm), produces a file with lines looking like this: 0 146.82.2.11 * Why? Am I supposed to specify a DNS server using /Y? I didn't expect to since Analog doesn't require it and I didn't see such a requirement in the qdns doc. If so, where is there a DNS server I can use? Thanks in advance for any help ... Uriel -- http://urielw.com + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
On Monday, August 09, 2004 4:13 PM [GMT], Uriel Wittenberg [EMAIL PROTECTED] wrote: QuickDNS, the Analog helper app (http://www.analogx.com/contents/download/network/qdns.htm), produces a file with lines looking like this: 0 146.82.2.11 * Why? Am I supposed to specify a DNS server using /Y? I didn't expect to since Analog doesn't require it and I didn't see such a requirement in the qdns doc. QuickDNS is a bit funky - I've always had to specify a DNS server, but other people seem to have used it without specifying one. As far as I know, the writer of QuickDNS has never contributed to this list, and I doubt if he will see your question here to answer it. If so, where is there a DNS server I can use? Use the DNS server that your use for everything else. Run IPCONFIG /ALL to see what your DNS server address is. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
Hi Aengus, Thanks for the reply! I did what you said; found my DNS server; re-ran qdns, specifying it. This time qdns was not so quick. When it was done I looked at the new dns file. Almost the same thing! 266 lines all similar to: 18202433 68.208.4.19 * qdns's output was as follows: --- AnalogX QuickDNS (QDNS) - Quick DNS version 2.00 (Release) [08/12/2000] The latest version is always available at http://www.analogx.com/ DNS IP Set to 209.226.175.223 Unable to open DNS file 'DNS1.TXT' 0 [0.0100 secs] DNS Entries loaded... 266 [0.0500 secs] Log Entries loaded... (619) 266 [0.1510 secs] Queued for lookup... 266 [ 67.8370 secs] Entries processed (266 resolved)... 266 [0.0300 secs] Entries saved... 266 [ 68.0880 secs] Completed (-266 unresolved)... --- By this time Analog's own DNS lookups had finished. The DNS file it produced is as I gather it should be, lines like: 18200901 68.6.213.104 ip68-6-213-104.sd.sd.cox.net (However, there too some of the lines are like 18200901 217.73.165.40 *.) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
On Monday, August 09, 2004 7:09 PM [GMT], Uriel Wittenberg [EMAIL PROTECTED] wrote: Hi Aengus, Thanks for the reply! I did what you said; found my DNS server; re-ran qdns, specifying it. This time qdns was not so quick. When it was done I looked at the new dns file. Almost the same thing! 266 lines all similar to: 18202433 68.208.4.19 * Unfortunately, that IP address doesn't have a reverse lookup, so that doesn't indicate a problem. I just ran qdns against a 50MB logfile, with over 100,000 entries, and it completed in a couple of minutes. I also have to specify the DNS file on the command line. C:\analogqdns /d dns.dns /l ex040805.log /y 192.168.4.41 AnalogX QuickDNS (QDNS) - Quick DNS version 2.00 (Release) [08/12/2000] The latest version is always available at http://www.analogx.com/ DNS IP Set to 10.135.129.141 Unable to open DNS file 'dns.dns' 0 [0.0400 secs] DNS Entries loaded... 1965 [ 23.2530 secs] Log Entries loaded... (114101) 1965 [5.6880 secs] Queued for lookup... 1965 [ 96.2790 secs] Entries processed (1965 resolved)... 1965 [0.0400 secs] Entries saved... 1965 [ 125.3100 secs] Completed (-1965 unresolved)... A full Host report actually shows 1958 entries, of which 437 are unresolved, so the (-1965 unresolved) is a bit misleading. If I ask Analog to resolve the same log file, I expect that it would take considerably longer than just a few minutes. As I said, qdns has always been a bit quirky. You might want to try one of the others. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
I always find rdnslogs works now. Before 3.50 the DNS routines wouldn't resolve anything other than NetBIOS names on my setup. *** REPLY SEPARATOR *** On 09/08/2004 at 20:07 Aengus wrote: On Monday, August 09, 2004 7:09 PM [GMT], Uriel Wittenberg [EMAIL PROTECTED] wrote: Hi Aengus, Thanks for the reply! I did what you said; found my DNS server; re-ran qdns, specifying it. This time qdns was not so quick. When it was done I looked at the new dns file. Almost the same thing! 266 lines all similar to: 18202433 68.208.4.19 * Unfortunately, that IP address doesn't have a reverse lookup, so that doesn't indicate a problem. I just ran qdns against a 50MB logfile, with over 100,000 entries, and it completed in a couple of minutes. I also have to specify the DNS file on the command line. C:\analogqdns /d dns.dns /l ex040805.log /y 192.168.4.41 AnalogX QuickDNS (QDNS) - Quick DNS version 2.00 (Release) [08/12/2000] The latest version is always available at http://www.analogx.com/ DNS IP Set to 10.135.129.141 Unable to open DNS file 'dns.dns' 0 [0.0400 secs] DNS Entries loaded... 1965 [ 23.2530 secs] Log Entries loaded... (114101) 1965 [5.6880 secs] Queued for lookup... 1965 [ 96.2790 secs] Entries processed (1965 resolved)... 1965 [0.0400 secs] Entries saved... 1965 [ 125.3100 secs] Completed (-1965 unresolved)... A full Host report actually shows 1958 entries, of which 437 are unresolved, so the (-1965 unresolved) is a bit misleading. If I ask Analog to resolve the same log file, I expect that it would take considerably longer than just a few minutes. As I said, qdns has always been a bit quirky. You might want to try one of the others. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives + -- S Collis [EMAIL PROTECTED] ICQ:9560926 MSN:[EMAIL PROTECTED] Chief web donkey, The Directory Of Everything Most Useful: http://www.emudir.com/ + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] qdns.exe produces bad DNS file
18202433 68.208.4.19 * Unfortunately, that IP address doesn't have a reverse lookup, so that doesn't indicate a problem. Well that is unlucky, but take my word for it, each and every entry in the DNS file was like that, with an unresolved name. qdns has always been a bit quirky. It simply doesn't work. I'm on WinXP Home, and I seem to be running it correctly. I chose qdns simply because it's the first Windows app at http://www.analog.cx/helpers/index.html#dns. Are the apps there evaluated somewhere? + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Logformat to strip blanks spaces
Hi what LogFormat settings could I use to either ignore the browser or include it.? Can someone give me an example. I have read the pages of logformat at the Analog site. #Software: Microsoft(R) Internet Security and Acceleration Server 2000 #Version: 1.0 #Date: 2004-08-09 00:00:00 #Fields: c-ip cs-username c-agent sc-authenticateddatetime s-svcname s-computername cs-referred r-host r-ipr-port time-taken cs-bytessc-bytescs-protocol cs-transports-operation cs-uri cs-mime-types-object-source sc-status s-cache-inforule#1 rule#2 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) N 2004-08-09 00:00:00W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 80081735634 84730 httpTCP GET http://web.ebop.int:8008/water/media/pdf/economic%20evaluation.pdf multipart/x-byteranges; boundar Inet206 0x40800040 EnvBOP - 203.98.57.67anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461; .NET CLR 1.0.3705; .NET CLR 1.1.4322) N 2004-08-09 00:00:05 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 313 596 23243 httpTCP GET http://web.ebop.int:8008/weeds/weed121.asp text/html Inet200 0x40020010 EnvBOP - Thanks Email disclaimer: This email and any attachments are confidential. If you are not the intended recipient, do not copy, disclose or use the contents in any way. If you receive this message in error, please let us know by return email and then destroy the message. Environment Bay of Plenty is not responsible for any changes made to this message and/or any attachments after sending. ** This e-mail has been checked for viruses and no viruses were detected. + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Request Report
Hello, in the logfile I've many requests like /cgi-bin/starfinder/... In the Request Report I want to do them in one group which calls /cgi-bin/starfinder/. How can I do this? It's very important. Dagmar -- NEU: WLAN-Router für 0,- EUR* - auch für DSL-Wechsler! GMX DSL = supergünstig kabellos http://www.gmx.net/de/go/dsl + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Request Report
On Fri, 6 Aug 2004, Dagmar Kroeker wrote: Hello, in the logfile I've many requests like /cgi-bin/starfinder/... In the Request Report I want to do them in one group which calls /cgi-bin/starfinder/. How can I do this? You can use this command: FILEALIAS /cgi-bin/starfinder/* /cgi-bin/starfinder/ But that's probably the wrong solution. You probably want to look at the Directory Report instead of the Request Report. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] LOGFORMAT Serv-U 5
Hello All, How i can set LOGFORMAT for this strings? [3] Sun 25Jul04 18:57:46 - (35) Sent file d:\video\trailers\ 2 (cool).avi successfully (3054 kB/sec - 10352640 Bytes) [3] Sun 25Jul04 18:58:49 - (35) Sent file d:\ftp\upload\ 08.05.04.jpg successfully (1912 kB/sec - 902405 Bytes) [3] Sun 25Jul04 18:59:54 - (35) Sent file d:\music\enemy\resident evil (soundtrack)\06 - adema - everyone.mp3 successfully (2444 kB/sec - 5153563 Bytes) [3] Sun 25Jul04 18:59:57 - (35) Sent file d:\music\enemy\resident evil (soundtrack)\11 - ill nino - what comes around (day of the dead mix).mp3 successfully (2661 kB/sec - 6418172 Bytes) LOGFORMAT [%j] %j %d%M%y %h:%n:%j - (%j) Sent file %r successfully (%j kB/sec - %b Bytes) this is not work, because there is space in the filename. or??? Who is guilty and what to do? 8) PS: Thanks and Sorry for my English. -- Best regards, Nickolay mailto:[EMAIL PROTECTED] + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] running analog
Hello, Is there a way to set the program up so that it runs automatically? Thank you, Clara ---Clara ChaffinIdaho State Climate ServiceUniversity of IdahoBio/Ag Engineering Dept.Po 440904Moscow, ID 838744-0904 website: www.uidaho.edu/~climatee-mail: [EMAIL PROTECTED] phone: (208) 885-7004fax: (208) 885-7908--
Re: [analog-help] running analog
On Tue, 3 Aug 2004, Idaho State Climate Services wrote: Hello, Is there a way to set the program up so that it runs automatically? All operating systems have a way to do this, but it's different for different operating systems. It's not an issue about analog though, it's just a matter of telling your OS to do it. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Separating Virtual Server logs.
By default, the Virtual Host Report, Virtual Host Redirection Report, and Virtual Host Failure Report are off. To turn each one on, use VHOST ON REDIRVHOST ON FAILVHOST ON See http://www.analog.cx/docs/output.html#replist; for more info. Other useful commands for analyzing virtual hosts are VHOSTINCLUDE and VHOSTEXCLUDE VHOSTREPINCLUDE and VHOSTREPEXCLUDE REDIRVHOSTREPINCLUDE and REDIRVHOSTREPEXCLUDE FAILVHOSTREPINCLUDE and FAILVHOSTREPEXCLUDE See http://www.analog.cx/docs/include.html; for more info. HTH, -- Duke Raji Arulambalam wrote: Hi I have multiple Virtual Servers logging to the same log file. How do I separate them out and report on each. I have tried 'REFINCLUDE http://web.ebop.in:8030/*' http://web.ebop.in:8030/*%27 and also 'FILEINCLUDE http://web.ebop.in:8030/*' http://web.ebop.in:8030/*%27. But I do not get any pages being reported. I am using Microsofts ISA server logs Example below.. #Software: Microsoft(R) Internet Security and Acceleration Server 2000 #Version: 1.0 #Date: 2004-07-30 00:00:13 #Fields: c-ip cs-username c-agent sc-authenticated date time s-svcname s-computername cs-referred r-host r-ip r-port time-taken cs-bytes sc-bytes cs-protocol cs-transport s-operation cs-uri cs-mime-type s-object-source sc-status s-cache-info rule#1 rule#2 172.16.0.11 celeris\marshal Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705) Y 2004-07-30 00:00:13 w3proxy CELERIS - www.oldfriends.co.nz 202.21.128.3 80 296 732 25974 http TCP GET http://www.oldfriends.co.nz/oldfriends/member_profile.asp?oldfriends_member_id=112852 text/html Inet 200 0x42020001 Web Marshal Proxy Web Marshal Proxy 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) N 2004-07-30 00:02:02 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 - 414 163 http TCP GET http://web.ebop.int:8008/images/Pollution-Busters800x600.jpg - Inet 304 0x40001002 EnvBOP - 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) N 2004-07-30 00:02:02 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 - 400 162 http TCP GET http://web.ebop.int:8008/menu/printer_plain.gif - Inet 304 0x40001002 EnvBOP - 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) N 2004-07-30 00:02:03 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 16 394 164 http TCP GET http://web.ebop.int:8008/menu/alpha.gif - Inet 304 0x40001002 EnvBOP - 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) N 2004-07-30 00:02:03 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 - 394 164 http TCP GET http://web.ebop.int:8008/images/Fav.gif - Inet 304 0x40001002 EnvBOP - 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) N 2004-07-30 00:02:03 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 - 394 163 http TCP GET http://web.ebop.int:8008/images/shim.gif - Inet 304 0x40001002 EnvBOP - 203.99.66.6 anonymous Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) N 2004-07-30 00:02:03 W3ReverseProxy CELERIS - www.envbop.govt.nz 172.16.0.9 8008 - 399 164 http TCP GET http://web.ebop.int:8008/images/tukutuku.gif - Inet 304 0x40001002 EnvBOP - 210.55.30.52 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) N 2004-07-30 00:02:04 W3ReverseProxy CELERIS - www.easternboprecovery.org.nz 172.16.0.9 8030 - 333 3866 http TCP GET http://web.ebop.int:8030/ text/html Inet 200 0x4080 EBOPRecovery - 210.55.30.52 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) N 2004-07-30 00:02:05 W3ReverseProxy CELERIS - www.easternboprecovery.org.nz 172.16.0.9 8030 - 266 13623 http TCP GET http://web.ebop.int:8030/images/recovery.jpg image/jpeg Inet 200 0x4080 EBOPRecovery - 210.55.30.52 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) N 2004-07-30 00:02:05 W3ReverseProxy CELERIS - www.easternboprecovery.org.nz 172.16.0.9 8030 16 261 6500 http TCP GET http://web.ebop.int:8030/Images/wdc.gif image/gif Inet 200 0x4080 EBOPRecovery - 210.55.30.52 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) N 2004-07-30 00:02:05 W3ReverseProxy CELERIS - www.easternboprecovery.org.nz 172.16.0.9 8030 16 264 7116 http TCP GET http://web.ebop.int:8030/Images/envbop.gif image/gif Inet 200 0x4080 EBOPRecovery - 210.55.30.52 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) N 2004-07-30 00:02:05 W3ReverseProxy CELERIS - www.easternboprecovery.org.nz 172.16.0.9 8030 16 261 5068 http TCP GET http://web.ebop.int:8030/Images/odc.gif image/gif Inet 200 0x4080 EBOPRecovery - 1 203.97.51.49 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) N 2004-07-30 00:02:33 W3ReverseProxy CELERIS - www.odc.govt.nz 172.16.0.9 8006 - 356 163 http TCP GET http://web.ebop.int:8006/images/v5_news.jpg - Inet 304 0x40001002 ODC - 203.97.51.49 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
Re: [analog-help] Top Pages on Particalur Date
On Monday, August 02, 2004 6:30 AM [GMT], ELIN, Luke [EMAIL PROTECTED] wrote: This might seem like a silly question. But I have been asked to find out if it is possible and feasible to present a the top most requested pages for a particular date(s). Has anyone tried this or is analog not suited for such a task and if not any other suggestions we be welcome. Analog won't generate a single report showing the most requested file on each day of a specified period, for reasons outlined in the FAQ: http://www.analog.cx/docs/faq.html#faq128 But you can run Analog and generate a seperate report for each day. If you configure Analog to turn off all reports except the request report, sort it by requests and only report a single entry in the request report, and get Analog to generate Computer Readable output, you can easily run it once for each day, and then use the results to create your own chart. ALL OFF GENERAL OFF REQUEST ON REQSORTBY REQUESTS REQFLOOR -1r REQCOLS Rr OUTPUT computer OUTFILE TopReq%y%M%D.txt FROM .. TO ... Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] LOGFORMAT problems
On Saturday, July 31, 2004 1:10 PM [GMT],
Harish Narayanan [EMAIL PROTECTED] wrote:
141.213.74.30 - - [31/May/2004:00:38:20 -0400] GET /play.css
HTTP/1.1 304 - actuality.wahgnube.org
http://actuality.wahgnube.org/; Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.0) -
For reference, the logformat I used from the webhost help page is:
%{Host}i %h %l %u %t \%r\ %s %b \%{Referer}i\ \%{User-agent}i\
%b
While I've never bothered to learn the Apache syntax, I can tell you
that that entry doesn't match the sample lines you posted - you can see
that the Apache config file has 2 entries between the request (\%r\)
and the Referrer, whereas your logfile has 3, the 3rd of which is
probably a virtual host entry (there are 2 different values in the lines
you posted - actuality.wahgnube.org and aggreg8.wahgnube.org).
Assuming I can just move the Host Header entry to the correct place, you
might try this APACHELOGFORMAT:
(%h %l %u %t \%r\ %s %b %{Host}i \%{Referer}i\ \%{User-agent}i\
-)
Alternatively, in Analog syntax,
LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b %v %f %B
-)
should do the job.
(Note that I have no idea what that last - is supposed to be, so I
have left it in explicitly. This will help you figure out if it's
important, if any lines fail because they do have some data in that
field).
Aengus
+
| TO UNSUBSCRIBE from this list:
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+
Re: [analog-help] LOGFORMAT problems
Aengus wrote:
Assuming I can just move the Host Header entry to the correct place, you
might try this APACHELOGFORMAT:
(%h %l %u %t \%r\ %s %b %{Host}i \%{Referer}i\ \%{User-agent}i\
-)
This seems to work, thank you! Now I have some issues with getting it to
understand virtual hosts, but it is a major improvement.
Thanks again,
Harish
+
| TO UNSUBSCRIBE from this list:
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+
Re: [analog-help] LOGFORMAT problems
Ben Barker wrote:
Sounds like the logformat isn't standar after all. If you take a peek
at a section of the log, you can use the LOGFILE command to specify
the exat format so analog will run - go to :
http://www.analog.cx/docs/logfmt.html
That was the document I used to get this far, but I will read it in
detail now. While I was trying to write out the format from the log file
itself, I came across this link [
http://faq.1and1.com/miscellaneous/10.html ]on my web host's support
site, so figured that would do.
to find out how. If you're still stuck, maybe post a bit of log her
and someone might help
217.160.226.85 - - [31/May/2004:00:00:33 -0400] GET /b2rss2.php
HTTP/1.0 200 18013 actuality.wahgnube.org - wahgnube.org :: aggreg8
http://aggreg8.wahgnube.org/output/ Planet/0.2
http://www.planetplanet.org/ UltraLiberalFeedParser/2.7.6
+http://diveintomark.org/projects/feed_parser/; -
68.107.106.195 - - [31/May/2004:00:10:13 -0400] GET
/files/misc/gimp-wiki-new1.png HTTP/1.1 200 43467 wahgnube.org -
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040510 -
205.138.96.46 - - [31/May/2004:00:12:00 -0400] GET / HTTP/1.1 200
47323 actuality.wahgnube.org - Mozilla/4.0 (compatible; MSIE 5.0;
Windows NT; DigExt; DTS Agent -
68.40.58.58 - - [31/May/2004:00:16:19 -0400] GET / HTTP/1.1 200 58061
aggreg8.wahgnube.org - Mozilla/5.0 (Windows; U; Windows NT 5.1;
en-US; rv:1.6) Gecko/20040206 Firefox/0.8 -
141.213.74.30 - - [31/May/2004:00:38:20 -0400] GET / HTTP/1.1 200
11891 actuality.wahgnube.org - Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.0) -
141.213.74.30 - - [31/May/2004:00:38:20 -0400] GET /play.css HTTP/1.1
304 - actuality.wahgnube.org http://actuality.wahgnube.org/;
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) -
For reference, the logformat I used from the webhost help page is:
%{Host}i %h %l %u %t \%r\ %s %b \%{Referer}i\ \%{User-agent}i\ %b
(And I replaced quotes with parenthesis like analog's help suggested.)
Thank you for your time.
Harish
+
| TO UNSUBSCRIBE from this list:
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+
Re: [analog-help] LOGFORMAT problems
Stephen Turner wrote: You're sure you got exactly the same error? That means that you have another LOGFILE above this LOGFORMAT. Or else this configuration file isn't being read at all. I just checked it again. 1. I get exactly the same error on all three cases. 2. I don't have another LOGFILE above that LOGFORMAT 3. My configuration file seems to be read because when I change LOGFILE to some name that doesn't exist, I get Warning F: Failed to open logfile. Thanks anyway. I will look into everything in more detail. Harish + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] LOGFORMAT problems
Hello all.
I am new to analog and I attempted to use it to analyze logfiles from my
ISP (1and1, Apache). I first tried it without logformat to get -
C:\Statistics\analog\analog.exe: Warning F: Can't auto-detect format of
logfile C:\Statistics\analog\log.log: ignoring it
I then tried it with APACHELOGFORMAT, to get the same error.
APACHELOGFORMAT (%{Host}i %h %l %u %t \%r\ %s %b \%{Referer}i\
\%{User-agent}i\ %b)
LOGFILE log.log
And I got the same thing when I tried LOGFORMAT.
LOGFORMAT (%{Host}i %h %l %u %t \%r\ %s %b \%{Referer}i\
\%{User-agent}i\ %b)
LOGFILE log.log
Is there something that's causing analog to miss this configuration
command? I am trying this using analog 5.91beta1 on windows. I am sorry
if this has been asked before.
Thanks for any help.
Harish
+
| TO UNSUBSCRIBE from this list:
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+
Re: [analog-help] Strange Logfile format
System Administrator wrote: I've added three lines from the start of my dubious logfile; 65.54.164.40 - - [08/jul/2004:03:07:39 -0600] get /stanns/index.html http/1.0 404 211 404 211 - - 196 168 295 208 0 msnbot/0.11 (+http://search.msn.com/msnbot.htm) 66.194.6.83 - - [08/jul/2004:05:58:28 -0600] get / http/1.1 200 3549 - - - - 108 272 - - 0 mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; q312467) 24.14.151.202 - - [08/jul/2004:13:29:04 -0600] get / http/1.1 200 3549 200 3549 - - 437 246 551 272 0 mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; .net clr 1.0.3705; .net clr 1.1.4322; alexa toolbar) Looks like the server adds a lot of junk between the common log format fields and the browser and referrer information. Something like LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j] %j%w%r%wHTTP%j %c %b %j %j %j %j %j %j %j %j %j %j %u %f %B) LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j] %j%w%r %c %b %j %j %j %j %j %j %j %j %j %j %u %f %B) LOGFORMAT (%S %j %j [%d/%M/%Y:%h:%n:%j] %r %c %b %j %j %j %j %j %j %j %j %j %j %u %f %B) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %j%w%r%wHTTP%j %c %b %j %j %j %j %j %j %j %j %j %j %f %B) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %j%w%r %c %b %j %j %j %j %j %j %j %j %j %j %f %B) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %r %c %b %j %j %j %j %j %j %j %j %j %j %f %B) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %j%w%r%wHTTP%j %c %b %j %j %j %j %j %j %j %j %j %j) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %j%w%r %c %b %j %j %j %j %j %j %j %j %j %j) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] %r %c %b %j %j %j %j %j %j %j %j %j %j) should work (basically one %j for each field you are NOT interested in). The sample gives no clue what the third field from the right might be, if this is a cookie field then %u is a good choice, otherwise use %j and change the leading %S %j %j to %S %j %u. -- Klaus Johannes Rusch [EMAIL PROTECTED] http://www.atmedia.net/KlausRusch/ + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Strange Logfile format
On Wednesday, July 28, 2004 11:40 PM [GMT], System Administrator [EMAIL PROTECTED] wrote: I've added three lines from the start of my dubious logfile; 65.54.164.40 - - [08/jul/2004:03:07:39 -0600] get /stanns/index.html http/1.0 404 211 404 211 - - 196 168 295 208 0 msnbot/0.11 (+http://search.msn.com/msnbot.htm) 66.194.6.83 - - [08/jul/2004:05:58:28 -0600] get / http/1.1 200 3549 - - - - 108 272 - - 0 mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; q312467) 24.14.151.202 - - [08/jul/2004:13:29:04 -0600] get / http/1.1 200 3549 200 3549 - - 437 246 551 272 0 mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; .net clr 1.0.3705; .net clr 1.1.4322; alexa toolbar) This LOGFORMAT parses the lines you posted: LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b %j%f %B) (There was an extra space in the one I suggested last week when you asked the same question). Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Separating domains in the report
If you included a uniquely-named, transparent, GIF image on each page, you could then track the requests for those images from your logfile. You could tailor each file name to fit the particular tld, subdomain, and even directory of your various pages. With a good name schema is in place and a single FILEINCLUDE with wildcard in your analog config file, you could get statistics for one combination of tld and subdomain. You could get reports for the three remaining combinations by running analog three more times and altering FILEINCLUDE each time. For that matter, you could state your FILEINCLUDE at the command line and not even bother with it in your config file. HTH, -- Duke Andreas Kalt wrote: On Wed, 28 Jul 2004 10:51:09 +0100, Aengus [EMAIL PROTECTED] wrote: Hi Aengus, If you look at a single entry in your logfile, can you tell which TLD or subdomain that entry is for (and therefore which report you would want that entry to be in?) If you can, then you can teach Analog the same rules that you used to make that decision. If you tell us what rules you used, and give us 2 or 3 sameple log lines, we can help you. it seems that I can't tell which TLD an entry belongs to. All I seem to get ist the absolute path from the root dir downward. Here are some sample lines anyway: 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /webdesign/tutorials/index.htm HTTP/1.1 200 12268 - Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/basic.css HTTP/1.1 200 648 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/print.css HTTP/1.1 200 1500 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/webdesign.css HTTP/1.1 200 3786 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /favicon.ico HTTP/1.1 200 1406 - Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/master.css HTTP/1.1 200 12165 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 Thanks for the help Andreas + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Separating domains in the report
On Thu, 29 Jul 2004 09:24:08 -0500, Duke Hillard [EMAIL PROTECTED] wrote: If you included a uniquely-named, transparent, GIF image on each page, you could then track the requests for those images from your logfile. You could tailor each file name to fit the particular tld, subdomain, and even directory of your various pages. With a good name schema is in place and a single FILEINCLUDE with wildcard in your analog config file, you could get statistics for one combination of tld and subdomain. You could get reports for the three remaining combinations by running analog three more times and altering FILEINCLUDE each time. For that matter, you could state your FILEINCLUDE at the command line and not even bother with it in your config file. Woo. I'm afraid that was a bit much in one go ;-) It seems that my idea takes quite a bit of effort and time both of which I can't spare at the moment. Thanks for your help but for now I will have to leave the matter. Thanks again. Andreas -- http://www.andreas-kalt.de/ http://www.rete-mirabile.net/ + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
RE: [analog-help] Strange Logfile format
That worked, you are a hero, thank you very much... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aengus Sent: July 29, 2004 3:27 AM To: [EMAIL PROTECTED] Subject: Re: [analog-help] Strange Logfile format On Wednesday, July 28, 2004 11:40 PM [GMT], System Administrator [EMAIL PROTECTED] wrote: I've added three lines from the start of my dubious logfile; 65.54.164.40 - - [08/jul/2004:03:07:39 -0600] get /stanns/index.html http/1.0 404 211 404 211 - - 196 168 295 208 0 msnbot/0.11 (+http://search.msn.com/msnbot.htm) 66.194.6.83 - - [08/jul/2004:05:58:28 -0600] get / http/1.1 200 3549 - - - - 108 272 - - 0 mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; q312467) 24.14.151.202 - - [08/jul/2004:13:29:04 -0600] get / http/1.1 200 3549 200 3549 - - 437 246 551 272 0 mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; .net clr 1.0.3705; .net clr 1.1.4322; alexa toolbar) This LOGFORMAT parses the lines you posted: LOGFORMAT (%S - %u [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b %j%f %B) (There was an extra space in the one I suggested last week when you asked the same question). Aengus +--- +- | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +--- +- --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004 + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Hourly Report problem
I am using Analog 5.32 for Windows. The daily report works as expected, 1 line of output per day. On the other hand the hourly report only outputs for the last three days of the month. I have not entered any special codes for either report and the errors file does not report any problems. What am I missing? Thanks, Carl Snow ___ Carl Snow Purdue University Libraries Network Access Librarian [EMAIL PROTECTED] 765-494-2764 + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Hourly Report problem
On Thu, 29 Jul 2004, Snow, Carl E. wrote: I am using Analog 5.32 for Windows. The daily report works as expected, 1 line of output per day. On the other hand the hourly report only outputs for the last three days of the month. I have not entered any special codes for either report and the errors file does not report any problems. What am I missing? You need the *ROWS family of commands. -- Stephen Turner, Cambridge, UKhttp://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
RE: [analog-help] Hourly Report problem
Dear Stephen, Thanks, that worked perfectly. Carl -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephen Turner Sent: Thursday, July 29, 2004 2:12 PM To: [EMAIL PROTECTED] Subject: Re: [analog-help] Hourly Report problem On Thu, 29 Jul 2004, Snow, Carl E. wrote: I am using Analog 5.32 for Windows. The daily report works as expected, 1 line of output per day. On the other hand the hourly report only outputs for the last three days of the month. I have not entered any special codes for either report and the errors file does not report any problems. What am I missing? You need the *ROWS family of commands. -- Stephen Turner, Cambridge, UK http://homepage.ntlworld.com/adelie/stephen/ Low Priced Cambridge Clare College. Big selection at eBay UK! (Ad after Google search for Clare College Cambridge) +--- +- | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +--- +- + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Separating domains in the report
Hi, I would like to get separate reports for two TLDs and another two subdomains. All is logged into one logfile and I don't run that server myself so I cannot follow the instructions in the How-To section because I can't alter any server settings. Is there still a way to do this? Grüße, Andreas -- http://www.andreas-kalt.de/ http://www.rete-mirabile.net/ + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Separating domains in the report
On Wednesday, July 28, 2004 8:34 AM [GMT], Andreas Kalt [EMAIL PROTECTED] wrote: I would like to get separate reports for two TLDs and another two subdomains. All is logged into one logfile and I don't run that server myself so I cannot follow the instructions in the How-To section because I can't alter any server settings. Is there still a way to do this? If you look at a single entry in your logfile, can you tell which TLD or subdomain that entry is for (and therefore which report you would want that entry to be in?) If you can, then you can teach Analog the same rules that you used to make that decision. If you tell us what rules you used, and give us 2 or 3 sameple log lines, we can help you. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
[analog-help] Analysed Requests From and To Line
Hello, I have a question about the analyzed requests line. It says "Analysed requests from Fri-31-Dec-1999 10:11 to Tue-04-Jan-2000 13:11 (4.12 days). " However, I've only been running the program for less than a week. Can you tell me why this is happening and what I can do to fix it? My web page is http://snow.ag.uidaho.edu/stats/Stats.html. Thank you, Clara ---Clara ChaffinIdaho State Climate ServiceUniversity of IdahoBio/Ag Engineering Dept.Po 440904Moscow, ID 838744-0904 website: www.uidaho.edu/~climatee-mail: [EMAIL PROTECTED] phone: (208) 885-7004fax: (208) 885-7908--
Re: [analog-help] Analysed Requests From and To Line
On Wednesday, July 28, 2004 7:36 PM [GMT], Idaho State Climate Services [EMAIL PROTECTED] wrote: I have a question about the analyzed requests line. It says Analysed requests from Fri-31-Dec-1999 10:11 to Tue-04-Jan-2000 13:11 (4.12 days). However, I've only been running the program for less than a week. Can you tell me why this is happening and what I can do to fix it? The Analog program includes a sample logfile (logfile.log) that has data for a few days from December 31st 1999 to January 4th, 2000. Analog is reading that sample logfile as well as your log. Just delete logfile.log in the Analog directory. Aengus + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
Re: [analog-help] Analysed Requests From and To Line
At 28/07/04 19:36, you wrote: I have a question about the analyzed requests line. It says Analysed requests from Fri-31-Dec-1999 10:11 to Tue-04-Jan-2000 13:11 (4.12 days). However, I've only been running the program for less than a week. Can you tell me why this is happening and what I can do to fix it? Sounds like it must be reading the default 'example' logfile. Check what logfiles are in its search path perhaps? -Sean
[analog-help] Strange Logfile format
Title: Message My ISP is SHAW and they use APACHE webservers, they tell me "Logfile format is "netscape extended + referers and user-agent" " Though I can't get it to run under any circumstance, all I get is analog: analog version 5.32/Win32analog: Warning L: Large number of corrupt lines in logfile C:\websites\copy_new\logs\access.07: turn debugging on or try different LOGFORMAT (For help on all errors and warnings, see docs/errors.html) Current logfile format: %S - %j [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b %j "%f" "%B"\nanalog: Warning R: Turning off empty time reportsanalog: Warning R: Turning off empty Request Reportanalog: Warning R: Turning off empty File Type Reportanalog: Warning R: Turning off empty Directory Reportanalog: Warning R: Turning off empty Domain Reportanalog: Warning R: Turning off empty Organisation Reportanalog: Warning R: Turning off empty Search Word Reportanalog: Warning R: Turning off empty Operating System Reportanalog: Warning R: Turning off empty File Size Reportanalog: Warning R: Turning off empty Status Code Report Please help... --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.726 / Virus Database: 481 - Release Date: 22/07/2004
Re: [analog-help] Separating domains in the report
On Wed, 28 Jul 2004 10:51:09 +0100, Aengus [EMAIL PROTECTED] wrote: Hi Aengus, If you look at a single entry in your logfile, can you tell which TLD or subdomain that entry is for (and therefore which report you would want that entry to be in?) If you can, then you can teach Analog the same rules that you used to make that decision. If you tell us what rules you used, and give us 2 or 3 sameple log lines, we can help you. it seems that I can't tell which TLD an entry belongs to. All I seem to get ist the absolute path from the root dir downward. Here are some sample lines anyway: 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /webdesign/tutorials/index.htm HTTP/1.1 200 12268 - Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/basic.css HTTP/1.1 200 648 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/print.css HTTP/1.1 200 1500 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/webdesign.css HTTP/1.1 200 3786 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /favicon.ico HTTP/1.1 200 1406 - Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 217.85.123.197 - - [06/Apr/2004:03:38:55 +0200] GET /css/master.css HTTP/1.1 200 12165 http://www.andreas-kalt.de/webdesign/tutorials/index.htm; Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 Thanks for the help Andreas -- http://www.andreas-kalt.de/ http://www.rete-mirabile.net/ + | TO UNSUBSCRIBE from this list: |http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +
