Mona Wong-Barnum ([EMAIL PROTECTED]; Monday, January 27, 2003 4:23 PM):
> Can anyone tell me why the following 2 entries: > caclis02.teleweb.pt - francisco santos [27/Apr/1999:15:50:20 -0700] "GET /~gi > na/Sec-I.B/Sec-I.B.html HTTP/1.1" 200 0 <(8289/1) Client broke connection: trans action>> <Mozilla/4.0 (compatible; MSIE 4.01; Windows 98)> <http://www-ncmir.ucsd .edu/~gina/toc.html>> <> > msk-202-18.mskcc.org - Juan [10/Aug/1999:08:15:10 -0700] "GET /~maryann/brus > es/ HTTP/1.0" 401 377 <(10321/1) Sent Authorization request: Authorization denie d>> <Mozilla/4.01 [en] (Win95; I)> <> <> > are not caught (eg claimed as corrupt) by the LOGFORMAT: > LOGFORMAT '%S - %u [%d/%M/%Y:%h:%n:%j %j] "%j %r %j" %c %b <%j> <%j> <%f> <%j>' The first one has two fields where Analog expects one for %u. If your user names have spaces in them, they should be quoted in the log files. As they are, you could still get that line by changing the logformat to "...%u[%d..." Of course this would make every username have a space after it in the report. If you turn on DEBUG C, Analog will print out an error message with each corrupt line telling you exactly where the parsing failed. Sometimes it also helps to use the ERRFILE command so you can view those lines without them wrapping on your terminal. See http://analog.cx/docs/debug.html. -- Jeremy Wadsack Wadsack-Allen Digital Group +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------