Aengus, here is my Request Report:
----------------------------------------------------------------------------
-------------
Listing files with at least 20 requests, sorted by the number of requests.
reqs: %bytes: last time: file
----: ------: ---------------: ----
33: 11.63%: 24/Mar/01 21:26:
http://www.209.196.125.61.uslex.net/_vti_bin/_vti_aut/author.dll
26: 0.41%: 27/Mar/01 00:20: /help/sbs.srv/misc/_ie4.css
372: 87.96%: 27/Mar/01 00:38: [not listed: 111 files]
----------------------------------------------------------------------------
-------------
And here is the top of one of my logs (I'll choose my most active domain):
----------------------------------------------------------------------------
-------------
#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2001-03-26 00:43:06
#Fields: date time c-ip cs-username s-sitename s-computername s-ip cs-method
cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes cs-bytes
time-taken s-port cs-version cs(User-Agent) cs(Cookie) cs(Referer)
2001-03-26 00:43:06 209.196.125.61 - W3SVC6 USLEX01 209.196.125.61 GET
/Default.htm - 304 0 189 414 0 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+NT;+DigExt) - -
2001-03-26 00:43:06 209.196.125.61 - W3SVC6 USLEX01 209.196.125.61 GET
/_themes/capsules/captext.gif - 304 0 142 341 15 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+NT;+DigExt) - http://uslex.net/
2001-03-26 00:43:06 209.196.125.61 - W3SVC6 USLEX01 209.196.125.61 GET
/teachme2solotiny.jpg - 304 0 142 333 16 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+NT;+DigExt) - http://uslex.net/
2001-03-26 00:43:06 209.196.125.61 - W3SVC6 USLEX01 209.196.125.61 GET
/images/USLex_logo_plain.gif - 304 0 142 340 0 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+NT;+DigExt) - http://uslex.net/
2001-03-26 00:43:06 209.196.125.61 - W3SVC6 USLEX01 209.196.125.61 GET
/images/Fish.jpg - 304 0 142 328 0 80 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+NT;+DigExt) - http://uslex.net/
blah, blah, blah
2001-03-26 14:39:46 149.101.1.108 - W3SVC6 USLEX01 209.196.125.61 GET
/Default.htm - 200 0 33209 552 2328 80 HTTP/1.0
Mozilla/4.5+[en]+(Win95;+U) - -
2001-03-26 14:39:48 149.101.1.108 - W3SVC6 USLEX01 209.196.125.61 GET
/teachme2solotiny.jpg - 304 0 166 599 0 80 HTTP/1.0
Mozilla/4.5+[en]+(Win95;+U) - http://www.uslex.net/
2001-03-26 14:39:51 149.101.1.108 - W3SVC6 USLEX01 209.196.125.61 GET
/_themes/capsules/captext.gif - 304 0 166 606 0 80 HTTP/1.0
Mozilla/4.5+[en]+(Win95;+U) - http://www.uslex.net/
2001-03-26 14:39:51 149.101.1.108 - W3SVC6 USLEX01 209.196.125.61 GET
/images/USLex_logo_plain.gif - 304 0 166 605 0 80 HTTP/1.0
Mozilla/4.5+[en]+(Win95;+U) - http://www.uslex.net/
2001-03-26 14:39:51 149.101.1.108 - W3SVC6 USLEX01 209.196.125.61 GET
/images/Fish.jpg - 304 0 166 593 0 80 HTTP/1.0 Mozilla/4.5+[en]+(Win95;+U) -
http://www.uslex.net/
2001-03-26 14:39:52 149.101.1.108 - W3SVC6 USLEX01 209.196.125.61 GET
/_themes/capsules/capsepa.gif - 304 0 166 605 0 80 HTTP/1.0
Mozilla/4.5+[en]+(Win95;+U) - http://www.uslex.net/
----------------------------------------------------------------------------
-----------------------------
Hope that helps.
Thanks, RAB
[EMAIL PROTECTED]
----- Original Message -----
From: Aengus <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, March 26, 2001 11:56 AM
Subject: Re: [analog-help] Virtual Hosts
> "Randall A. Blake" <[EMAIL PROTECTED]> wrote:
>
> > Aengus, I am using the W3C Extended format (with all options checked),
> and I
> > have included the names of the virtual domains in the logfile, like
> this:
> >
> > LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc3\ex* http://www.%v.poco.org
> > LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc4\ex*
> http://sportsflight.com
> > LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc5\ex*
> > LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc6\ex*
> http://www.%v.uslex.net
>
> The second parameter to the LOGFILE command isn't used for the VHOST
> report, it's simply used as a prefix for the request report (so that you
> can tell www.server1.com/index.htm from www.server2.com/index.htm for
> instance). The VHOST report is generated from the cs-host field in your
> logfiles.
>
> What do you get in your request log when you used the lines above?
>
> Can you post the #headers from one of your log files, and 3 or 4 lines?
>
> Aengus
>
> ------------------------------------------------------------------------
> This is the analog-help mailing list. To unsubscribe from this
> mailing list, send mail to [EMAIL PROTECTED]
> with "unsubscribe" in the main BODY OF THE MESSAGE.
> List archived at http://www.mail-archive.com/[email protected]/
> ------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
