William D. Colburn (aka Schlake) <[EMAIL PROTECTED]> wrote:
> Here is the log line from the Apache server:
> LogFormat "%h %{X-Forwarded-For}i %l %u %t \"%r\" %>s %b
> \"%{Referer}i\"" tcc
>
> The X-Forwarded-For comes in from the proxy, and is supposed to
> represent the host that made the request. In practice it is usually
> one ip, but sometimes contains many ips.
Okay, the X-Forwarded-For header can contain multiple IP addresses if
the request passes through multiple proxy servers - it's not supposed to
be multiple requests rolled up in a single log entry.
Your best bet would be to use an Apache module to discard the additional
proxy server addresses, but if not, then multiple logformats to junk the
additional addresses should work.
Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------
