I guess I should have described better what I hope to achieve. I would like to know which public IP address, foo.com for example, downloaded "bar.pdf". I'm not worried about dynamic addresses too much. I'm more interested in the static IP's and what they are looking at.
Well, you can't (easily) tell whether a particular IP address is static or dynamic.
I think you're just asking whether IP address aaa.bbb.ccc.ddd downloaded what stuff. Well, every file accessed is in your web server logs. Apache's standard log files will record the time every request, the IP address it came from and the file name... and other information as well. Have a look at the documentation for Apache which will also tell you how to add further information to the logs.
Analog is about providing aggregate data on traffic, and its documentation will show you what is and isn't provided. It'll certainly tell you that N requests were made for file bar.pdf, and if you add (from memory) the following lines to the configuration file...
FILEINCLUDE bar.pdf
FILEEXCLUDE *... then you'll get a report that's ONLY about bar.pdf.
The Analog docs will tell you what reports are provided in Analog, and particularly some which aren't turned on by default.
http://www.analog.cx/docs
If you want any analysis that isn't provided by Analog, then you can always just filter your files for the lines that are about bar.pdf... and then suck them into anything like (in Windows terms) Access or Excel and data-mine away!
Analog doesn't do anything magickal... it just provides summary reports of what's in your logs. It's certainly going to provide a lot of the initial questions you'll have -- which files are being accessed, and how many are looking at bar.pdf compared with baa.pdf.
With my clients, I usually find that Analog's reporting gives them PLENTY to think about before they need to do any more complex or sophisticated analysis.
Other more expensive reporting packages simply make things "look pretty" but provide little additional in the way of actual usable analysis. Or they claim to provide data such as "how long did they look at the site for?" which is actually impossible to determine with accuracy.
Are we getting close to the answer to what you're asking about? :)
Stil
-- Stilgherrian <[EMAIL PROTECTED]> Internet, IT and Media Consulting, Sydney, Australia. ABN 25 231 641 421 mobile 0407 623 600 (international +61 407 623 600) fax 02 9516 5630 (international +61 2 9516 5630) +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
