Pete Mason wrote:

It was odd because the log files are very similar to the apache combined log files I had before. Typical output is 62.252.32.11 - - [04/Jun/2006:23:59:57 +0200] "GET /Images/furniture/covers/thumb/51.48.jpg HTTP/1.1" 200 1878 www.socialistparty.org.uk <http://www.socialistparty.org.uk/> "http://www.socialistparty.org.uk/cgi-bin/bookform7.pl?nextten=31&ordernumber=2211&cat=0&findword=0&sortby <http://www.socialistparty.org.uk/cgi-bin/bookform7.pl?nextten=31&ordernumber=2211&cat=0&findword=0&sortby>=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Tesco; .NET CLR 1.1.4322)" "86.29.142.254" CustomLog /var/log/httpd/access_log "%{Host}i %h %l %u %t \"%r\" %s %b %v \"%{Referer}i\" \"%{User-agent}i\"

That does not look right:

  1. The first field in the sample log looks like a remote address, not
     a Host input header (and the field count does not match).
  2. The log also contains an extra field "86.29.142.254" at the end
     which is not accounted for in the log format.

--
Klaus Johannes Rusch
[EMAIL PROTECTED]
http://www.atmedia.net/KlausRusch/

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to