>Please find below the first 3 lines of one of our log files > >www.bradley-beazley.co.uk 193.133.137.70 - - [29/Sep/1999:09:31:41 >+0000] "GET / HTTP/1.0" 200 0 "Mozilla/4.0 (compatible; MISS 4.01; >Windows NT)" "-" "SITESERVER=ID=21aea88266e5c681e995c70c28c3a7f7" > >www.bradley-beazley.co.uk 193.133.137.70 - - [29/Sep/1999:09:31:45 >+0000] "GET /images/bbrlogo.gif HTTP/1.0" 304 0 "Mozilla/4.0 >(compatible; MISS >4.01; Windows NT)" "http://www.bradley-beazley.co.uk/" >"SITESERVER=ID=21aea88266e5c681e995c70c28c3a7f7" > >www.bradley-beazley.co.uk 193.133.137.70 - - [29/Sep/1999:09:31:45 >+0000] "GET /images/bbrbackground.gif HTTP/1.0" 304 0 "Mozilla/4.0 >(compatible; MISS 4.01; Windows NT)" "http://www.bradley-beazley.co.uk/" >"SITESERVER=ID=21aea88266e5c681e995c70c28c3a7f7" Try LOGFORMAT (%v %S - - [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b "%B" "%f" %j) There isn't quite enough information to be sure - all 3 lines start with www.bradley-beazley.co.uk 193.133.137.70 - - I'm guess www.bradley-beazley.co.uk is your host name, so %v (or %j if it's the only host you have) and 193.133.137.70 is the visitors IP address - it should be easy to see if later entries have a different IP address here. One of the "- -" fields us usually the Username - look for some lines that don't have - - and it should be obvious which field is which. All 3 of your lines have 0 after the HTTP code - this is normally the number of bytes sent back to the user, which would normally be 0 for a 304 response, but > 0 for a 200 response, but again, look at some other lines to be absolutely sure (there aren't any other obvious candidates for a byte count in these examples). The last entry is a cookie - I've marked it as %j to tell Analog to ignore it, but in some cases you can use it as the User field to glean some information. Aengus ------------------------------------------------------------------------ This is the analog-help mailing list. To unsubscribe from this mailing list, send mail to [EMAIL PROTECTED] with "unsubscribe" in the main BODY OF THE MESSAGE. List archived at http://www.mail-archive.com/[email protected]/ ------------------------------------------------------------------------
