Hi,

Newbie alert! :-)

I'm seeing some anomolous behavior with analog-4.1 on a v3.2 FreeBSD Unix
system. (I've tried a bunch of variations, but this is the simplest
repeatable test case reduced down from the original symptoms.)

Using analog-4.1, with an log containing only the following line:

142.204.238.134 - - [14/Dec/1999:09:54:57 -0500] "GET /hp3.JPG HTTP/1.0" 200

and the following definition in the analog.cfg file:

LOGFORMAT (%j)

I get corrupt files:

<br><b>Corrupt logfile lines:</b> 1

Yet a log with the following line has no problem:

142.204.238.134 - - [14/Dec/1999:09:54:57 -0500] "GET /hp3.JPG HTTP/1.0" 200
45394

Any idea what's going wrong? I think it might have something to do with the
variable "pos" running past the "\n" that follows the end of the scanned in
logfile line.

Thanks, Eric

PS I'm actually trying to get analog to read a Netscape extended2 logfile
format that looks like this:\

199.178.188.71 - - [21/Apr/2000:16:22:33 -0400] "GET http://www.foobar.com/
HTTP
/1.0" 200 2574 000 0 0 0 345 354 0 0 11 NONE FIN FIN TCP_HIT

I was trying to use the following LOGFORMAT command, but later boiled the
problem down to the report given above:

LOGFORMAT (%S - - [%d/%M/%Y:%h:%n:%j -%j] "%j %r %j" %c %b %j %j %j %j %j %j
%j %j %j %j %j %j %j)

Any ideas on how to do this better?

------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------

Reply via email to