All,
I've spent the
better part of the day trying different configurations, and getting all kinds of
weird outputs, and I'm still not getting what I want, so I'm asking the smart
people.
I'm trying to get a
sense of the amount of GB/MB transferred from the server, and near as I can
tell, the logfiles are capturing that information. Here's the log
fields:
#Fields: c-ip date
time c-dns cs-uri-stem c-starttime x-duration c-rate c-status c-playerid
c-playerversion c-playerlanguage cs(User-Agent) cs(Referer) c-hostexe
c-hostexever c-os c-osversion c-cpu filelength filesize avgbandwidth protocol
transport audiocodec videocodec channelURL sc-bytes c-bytes s-pkts-sent
c-pkts-received c-pkts-lost-client c-pkts-lost-net c-pkts-lost-cont-net
c-resendreqs c-pkts-recovered-ECC c-pkts-recovered-resent c-buffercount
c-totalbuffertime c-quality s-ip s-dns s-totalclients s-cpu-util cs-user-name
s-session-id s-content-path cs-url cs-media-name c-max-bandwidth cs-media-role
s-proxied
and a sample line
from a log:
IP
REDACTED 2006-05-31 00:04:17 - /video/lia.wmv 0 33 3 200
{3300AD50-2C39-46c0-AE0A-F5FC453811FC} 9.0.0.2980 en-US
Mozilla/4.0_(compatible;_MSIE_5.5;_Windows_NT_5.0)_(WMFSDK/9.0.0.2980)_WMPlayer/9.0.0.3344(WMPDXM) URL
REDACTED iexplore.exe 5.51.4807.2300 Windows_2000 5.0.0.2195 Pentium 240
26670830 3373336 rtsp TCP - - - 14147354 14147354 1765 1765 0 0 0 0 0 0 1 2 100
IP REDACTED 1 28 - 900 file://D:\Data\video\lia.wmv URL
REDACTED lia.wmv - - 0
Near as I can tell,
the 14147354 is the result of the sc-bytes and c-bytes
fields.
But when I add "%b"
to the LOGFORMAT line, I don't get any bytes returned, and the rest of the
output is screwed up. Here's the LOGFORMAT line that
works:
LOGFORMAT (%s
%Y-%m-%d %h:%n:%j %S %r %j %j %j %j %j %j %j %B %f %j)
LOGFORMAT
(#%j)
Does the %b need to
go in a specific spot on the line to return that information? I've tried
it at the end, after the %B, in a few other places, to no luck. Or am I
mistaken, and the logfiles are not actually capturing that data and I need to
add that on to the server's logs?
One other question -
is there a way to SORTBY numerically? I'd like to sort the Domain report
by IP address.
TIA,
Dan
_____________________________________________________________________
The information contained in this electronic e-mail transmission
and any attachments are intended only for the use of the individual
or entity to whom or to which it is addressed, and may contain
information that is privileged, confidential and exempt from
disclosure under applicable law. If the reader of this communication
is not the intended recipient, or the employee or agent responsible
for delivering this communication to the intended recipient, you
are hereby notified that any dissemination, distribution, copying
or disclosure of this communication and any attachment is strictly
prohibited. If you have received this transmission in error, please
notify the sender immediately by telephone and electronic mail,
and delete the original communication and any attachment from any
computer, server or other electronic recording or storage device
or medium. Receipt by anyone other than the intended recipient is
not a waiver of any attorney-client, physician-patient or other
privilege. Thank you.
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
