actually, that is the IP address of our intranet server (i just gave a dummy one.hehe.). my.bulletinboard.com & my.onlinemileage.com are virtual hosts. that's the reason why i have the second argument in LOGFILE line which is
LOGFILE c:\WINNT\system32\LogFiles\W3SVC5\*.log http://%v LOGFILE c:\WINNT\system32\LogFiles\W3SVC10\*.log http://%v the first line is for my.bulletinboard.com. the other one is for my.onlinemileage.com. this is a line from a logfile in W3SVC5 folder (my.bulletinboard.com) 2002-05-01 23:20:06 123.456.100.10 - 123.456.100.22 80 GET /04252002/training1.htm - 200 my.bulletinboard.com Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+98;+DigExt) we have other virtual hosts and the settings are all the same. i dont know why in the Directory and Request Report, some are counted properly. others go to the IP address of the intranet server... er, hope i cleared things up. :) > reqs: %bytes: directory > ----: ------: --------- > 7037: : http:// > 192: : http://my.onlinemileage.com/ > 191: : http://my.onlinemileage.com/mar_apr_2002/ > 3609: : http://123.456.100.22/ > 13: : http://123.456.100.22/02282002/ <--this shld be for my.bulletinboard.com > 434: : http://123.456.100.22/mar_apr_2002/ <--my.onlinemileage.com > 3236: : http://my.bulletinboard.com/ > 426: : http://my.bulletinboard.com/05162002/ > 20: : http://my.bulletinboard.com/02282002/ > 406: : http://my.bulletinboard.com/04182002/ -----Original Message----- From: Aengus [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 21, 2002 10:57 PM To: [EMAIL PROTECTED] Subject: Re: [analog-help] Output mix-up for Multiple Hosts, Logfiles The report is including requests for 123.456.100.22 because that address is in your log files. It may be that someone is using a browser or worm that doesn't support host headers, or they may be deliberately using that address. You could try just VHOSTinclude 123.456.100.22 and see what the HOST report and the Browser report suggest about the source of those requests. Aengus +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
