Here is my quandry (and I'm glad this list exists now for all my 
innane questions):

First, I read the FAQ, and secondly, I went throught he web archive
of the list looking for the answer. While there is some stuff dealing
with ftp logs, it doesn't look like their log file is what ftpd normally
spits out.

So, I am trying to parse a standard ftp log file. A standard line in the
file looks like:

Tue Jan 12 08:10:01 1999 248 D139.Z193-125-20.relcom.ru 1785103 
/pub/outgoing/FTP_MUSTEK/drv_nt/sppro_16.zip b _ i g elektron ftp 0 *

I generated the following LOGFORMAT line to deal with it:

LOGFORMAT       (%j %M %d %h:%n:%j %Y %j %S %b %r %j _ %j %j %u %j %j %j)

The "config" file I use to parse this file (for the last 7 days) looks like:

LINKINCLUDE pages
UNCOMPRESS *.gz,*.Z "/usr/local/bin/gunzip -c"
BROWOUTPUTALIAS Mozilla Netscape
BROWOUTPUTALIAS "Mozilla (compatible)" "Netscape (compatible)"
BROWOUTPUTALIAS IWENG AOL
REFERRER        ON
DOMAIN          ON
DIRECTORY       ON
REQUEST         ON
FULLDAILY       ON
FILEEXCLUDE     *.gif,*.jpg
OUTPUT          ASCII
DNSFILE         /usr/local/etc/analog/dnscache
DNSGOODHOURS    2160
DNS             WRITE
LANGUAGE        US-ENGLISH
FROM            -00-00-01
TO              -00-00-07
LOGFORMAT       (%j %M %d %h:%n:%j %Y %j %S %b %r %j _ %j %j %u %j %j %j)
HOSTNAME        some.domain.com
HOSTURL         http://some.domain.com/
LOGFILE         /var/adm/httpd-logs/xferlog*

I'm using analog 3.0 (upgrading to 3.11 now). Any hints? Suggestions?

---
Bob Gahl KD6KMX Bicycle (Ryan Vanguard) Mobile  ||      @
      ARPA/INTERNET: [EMAIL PROTECTED]        ||   !_ \
    WWW: http://www.thesphere.com/~bgahl/       ||   (*)-~--+--(*)
"If you're trying to be politically correct you're like a chameleon
 in front of a mirror. What can you say that won't be offensive to
 somebody?"                                        Robin Williams
--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

Reply via email to