On Thu, 31 Jan 2002, Rodney Knott wrote: > I am attempting to run analog on the ISA logs we are using. I allowed > analog to auto select a compatible format and it came up with W3 extended, > but that only processed a very small number of log entries. I ran it again > with debug C on and it gave me errors like the following for almost all of > our log entries: > > C: > C:10.X.X.X anonymous Mozilla/4.0 (Compatible;MSIE 6.0; Windows NT > 5.0;Q312461) 2002-01-12 00:00:35 FIREWALL02 - > www.streamingfaith.com 10.X.X.X 80 733 140 http > Get http://10.X.X.X/images/radiotab.gif inet 304 > > > Any and all suggestions are welcomed and appreciated. >
Well, the following C line will say where the line was corrupt. But one thing that I notice is that the browser should be in quotes, so I don't think this is proper extended format. You may have to write your own LOGFORMAT string. -- Stephen Turner, Cambridge, UK http://homepage.ntlworld.com/adelie/stephen/ "This is Henman's 8th Wimbledon, and he's only lost 7 matches." BBC, 2/Jul/01 +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
