From: "Randall A. Blake" <[EMAIL PROTECTED]> wrote:

> Aengus, here is my Request Report:
>
> -----------------------------------------------------------------------
>Listing files with at least 20 requests, sorted by the number of requests
>
> reqs: %bytes:       last time: file
> ----: ------: ---------------: ----
>   33: 11.63%: 24/Mar/01 21:26:
> http://www.209.196.125.61.uslex.net/_vti_bin/_vti_aut/author.dll

This tells us that your log file contains the IP number, not a host name

>   26:  0.41%: 27/Mar/01 00:20: /help/sbs.srv/misc/_ie4.css
>  372: 87.96%: 27/Mar/01 00:38: [not listed: 111 files]
> ------------------------------------------------------------------------
>
> And here is the top of one of my logs (my most active domain):
>
> ------------------------------------------------------------------------
> #Software: Microsoft Internet Information Server 4.0

I think your original post said IIS5, but it also said NT4, so IIS4 makes
more sense.

> #Version: 1.0
> #Date: 2001-03-26 00:43:06
> #Fields: date time c-ip cs-username s-sitename s-computername s-ip
> cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes
> cs-bytes time-taken s-port cs-version cs(User-Agent) cs(Cookie)
> cs(Referer)

My copy of IIS5 allows me to log the Host field between the version and
Browser (My #Fields line include this: ... cs-version cs-host
cs(User-Agent)... )

I don't have access to IIS4 at the moment, so I can't call whether it
records the Host header or not. I'm assuming that Analog is using the s-ip
field for the VHost report if cs-host isn't available.

This isn't usually an issue with IIS because it does create separate log
files for each virtual host, so you don't need to identify the vhost on
each line. If you use 2 different names for a single virtual host, and
want to see which name is being used, you might have a problem, but that
doesn't seem to be the case here.

If you do something like this (below), and then look at the Directory
report, it should give you the sort of comparative numbers that you were
expecting to find in the VHost report. (The second parameter to the
LOGFILE
commands is simply preprended to every request, so that when Analog does
the Directory report, it see the 4 server names as top level directories)

LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc3\ex* www.poco.org
LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc4\ex* sportsflight.com
LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc5\ex* w3svc5
LOGFILE c:\winnt.sbs\system32\LogFiles\W3svc6\ex* www.uslex.net

Aengus




------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------

Reply via email to