On Wednesday, May 31, 2006 3:57 PM [EDT], Sokolow, Daniel <[EMAIL PROTECTED]> wrote:
All, I've spent the better part of the day trying different configurations, and getting all kinds of weird outputs, and I'm still not getting what I want, so I'm asking the smart people. I'm trying to get a sense of the amount of GB/MB transferred from the server, and near as I can tell, the logfiles are capturing that information. Here's the log fields: #Fields: c-ip date time c-dns cs-uri-stem c-starttime x-duration c-rate c-status c-playerid c-playerversion c-playerlanguage cs(User-Agent) cs(Referer) c-hostexe c-hostexever c-os c-osversion c-cpu filelength filesize avgbandwidth protocol transport audiocodec videocodec channelURL sc-bytes c-bytes s-pkts-sent c-pkts-received c-pkts-lost-client c-pkts-lost-net c-pkts-lost-cont-net c-resendreqs c-pkts-recovered-ECC c-pkts-recovered-resent c-buffercount c-totalbuffertime c-quality s-ip s-dns s-totalclients s-cpu-util cs-user-name s-session-id s-content-path cs-url cs-media-name c-max-bandwidth cs-media-role s-proxied and a sample line from a log: IP REDACTED 2006-05-31 00:04:17 - /video/lia.wmv 0 33 3 200 {3300AD50-2C39-46c0-AE0A-F5FC453811FC} 9.0.0.2980 en-US Mozilla/4.0_(compatible;_MSIE_5.5;_Windows_NT_5.0)_(WMFSDK/9.0.0.2980)_WMPla yer/9.0.0.3344(WMPDXM) URL REDACTED iexplore.exe 5.51.4807.2300 Windows_2000 5.0.0.2195 Pentium 240 26670830 3373336 rtsp TCP - - - 14147354 14147354 1765 1765 0 0 0 0 0 0 1 2 100 IP REDACTED 1 28 - 900 file://D:\Data\video\lia.wmv <file://D:\Data\video\lia.wmv> URL REDACTED lia.wmv - - 0 Near as I can tell, the 14147354 is the result of the sc-bytes and c-bytes fields. But when I add "%b" to the LOGFORMAT line, I don't get any bytes returned, and the rest of the output is screwed up. Here's the LOGFORMAT line that works: LOGFORMAT (%s %Y-%m-%d %h:%n:%j %S %r %j %j %j %j %j %j %j %B %f %j) LOGFORMAT (#%j) Does the %b need to go in a specific spot on the line to return that information?
By my count, there are 13 fields between the referrer and sc-bytes, so you need something like: LOGFORMAT (%S %Y-%m-%d %h:%n:%j %j %r %j %j %j %c %j %j %j %B %f %j %j %j %j %j %j %j %j %j %j %j %j %j %b %j)
I've tried it at the end, after the %B, in a few other places, to no luck. Or am I mistaken, and the logfiles are not actually capturing that data and I need to add that on to the server's logs?
Add on? You might consider turning off some of the fields that you aren't using, and don't actually care about.
One other question - is there a way to SORTBY numerically? I'd like to sort the Domain report by IP address.
HOSTSORTBY ALPHABETICAL will sort numeric IPs numerically in the Host Report (99 before 100, etc), but the Domain report will treat domain names, including unresolved IP addresses, as strings, so you get a "pure" alphabetical sort, with 100 before 99.
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
