> A good way to test might be to log all IP addresses for now > and use the "logresolve" program to debug further.
Yes, we have been doing so (turning hostname lookup). That should rule out name resolver as a possible cause, I presume? The typical log entries are like these: 199.243.210.240 - - [21/May/1998:17:32:02 -0700] "GET /Other/folks.html HTTP/1.0" 200 642 202 - - [21/May/1998:17:32:03 -0700] "GET /HXWZ/CM97/ HTTP/1.0" 200 8771 138.26.34.115 - - [21/May/1998:17:32:03 -0700] "GET /CND-Global/CND-Global.new.html HTTP/1.0" 200 23027 As in the original report, our conf file contains these lines that came with the example httpd.conf in the 1.3b6 distribution: HostnameLookups off LogFormat "%h %l %u %t \"%r\" %>s %b" common CustomLog /var/log/httpd/access_log common Thanks for the resposes, Wei Lin
