am 10.04.2002 19:12 Uhr schrieb Aengus unter [EMAIL PROTECTED]:

> Max Gut <[EMAIL PROTECTED]> wrote:
> 
>> am 10.04.2002 17:26 Uhr schrieb Aengus unter [EMAIL PROTECTED]:
>> 
>>>>>> The string was send to me like this:
>>>>>> 
>>>>>> "%A %h %l %u %t \"%r\" %s %b %{Host}i \"%{Referer}i\" \"%{User-
>>>>>> agent}i\" \"%{X-Forwarded-For}i\""
>> 
>> Here are 3 Lines from the Apache Webserver and I will be happy about a
>> format suggestion that matches:
>> 
>> 195.252.203.173 - - [03/Mar/2002:23:59:19 +0100] "GET /links.gif
>> HTTP/1.1" 200 6412 www.w-h-d.de "http://www.w-h-d.de/men5.html";
>> "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" "-"
> 
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
> "%B" "%j")
> 
> Note that that list field, "X-Forwarded-For" is a bit tricky, because if
> it's present, you might actually want to treat it as %S, in which case
> you might want to use 3 LOGFORMATS:
> 
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
> "%B" "unknown")
> LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
> "%B" "-")
> LOGFORMAT (%j %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f"
> "%B" "%S")
> 
> Aengus


With this analog.cfg Analog Report Warnings are:

Warning L: Large number of corrupt lines in logfile
try different LOGFORMAT, Current logfile format:
%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" "%B" "unknown"\n
%S %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" "%B" "-"\n
%j %j %u [%d/%M/%Y:%h:%n:%j] "%j %r HTTP%j" %c %b %v "%f" "%B" "%S"\n

My Provider added the {X-Forwarded-For} to catch the "logins via
Proxyserver" he said and this was where my problem started.

Max



+------------------------------------------------------------------------
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|    http://www.mail-archive.com/[email protected]/
|    http://lists.isite.net/listgate/analog-help/archives/
|    http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------

Reply via email to