On Friday, January 06, 2006 1:53 PM [EDT],
Wally Winchester <[EMAIL PROTECTED]> wrote:

> Hi list,
> I would like to know who is using the most bandwidth on my website.
>
> Instead I see "unresolved ip addresses".

There are a couple of different issues here.

How do you define "who". If you're looking at IP addresses, be aware that a
single user can have a different IP address every day, and that multiple
users can share a single IP address.
http://analog.cx/docs/webworks.html

You can get a better definition of "who" by having your users log in, and
using the User Report to see who the bandwidth hogs are (use the USERCOLS
command to include a Bytes column in the User Report). Even without
usernames/passwords, you might be able to use cookies to track users over
time - you cn create a custom LOGFORMAT that will allow you to tret a
specific field in your cookie as a username.

But if you're trying to use the Domain Report or the Organization report  to
identify heavy users, then the question of why you get "unresolved ip
addresses" is addressed in the FAQ:
http://analog.cx/docs/faq.html#faq140

Even when you set up DNS Resultion (http://analog.cx/docs/dns.html), up to
1/3 of the addresses in your logfile may be unresolvable - not everyone
creates Reverse DNS entries for all their IP addresses.

It's also possible that you will get unresolved response if your FLOOR is
set too high.

> Am I in the right section, and if yes, how can I get the information
> from analog?

Which Reports are you looking at, and are you trying to pick out single
individuals that you think may be abusing your service, or are you just
trying to get a general overview?

Aengus

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to