On 2/17/99 2:21 PM [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote:

>I've taken a close look at my log file entries that Analog is reporting as 
>corrupt (unable to process) and discovered they have something in common.  
>The 
>referrer portion includes embedded quotes.  I've included below a sample 
>of some
>of the problem entries from recent logs.  Each one shows the user having 
>been 
>referred from one of several search sites where they ran a query to find 
>one of 
>my site's pages.  It would appear that either the user is putting quotes 
>around 
>their search criteria, or that they are somehow being included by the search 
>site.  These quotes were then included in the referrer portion of the 
>header.  
>My guess is that Analog is seeing these quotes and is not able to process 
>the 
>line as a result.  Is this correct?  If so, is there any way to fix it?  I'm 
>getting hundreds of these lines every month and sure would like to have them 
>included in my reports.
>
>I'm running the Netscape Enterprise server 3.51 with log files configured as:
>
>format=%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] 
>"%Req->reqpb.clf-request%" %Req->srvhdrs.clf-status% 
>%Req->srvhdrs.content-length% "%Req->headers.referer%" 
>"%Req->headers.user-agent%"
>
>152.163.205.88 - - [08/Feb/1999:01:21:25 -0500] "GET /money/milpay/index.htm 
>HTTP/1.0" 200 7273 
>"http://www.realnames.com/Resolver.dll?action=query&providerID=2&fallBackU
>RL=htt
>p%3A%2F%2Fwww%2Elooksmart%2Ecom%2Fr%5Fsearch%3Flook%3D%26pin%3D990207x27f7
>ea332c
>9bf9b5361%26key%3Dmilitary%2Bpaygrades%26search%3D0%26x%3D7%26y%3D7&rangeS
>tart=2
>0&rangeLength=10&realName="military+paygrades"" "Mozilla/4.0 (compatible; 
>MSIE 
>4.01; AOL 4.0; Windows 98)"

This is one of those complex cases where there isn't any correct answer. 
It is not legal to have double quotes inside a referrer string, but they 
are none the less there. There is no way to parse lines correctly that 
have quotes in the referrer string as long as the log is quoting the 
string with double quotes. Technicaly the server ought to prevent the 
double quotes from being written to the log file.

You could reconfigure the server to quote the referrer string with some 
other character, perhaps single quote, and then reconfigure Analog to 
expect single quotes. Hopefully there will not be single quotes in 
referrer strings.

Jason


-----------------
[EMAIL PROTECTED]
-----------------
Dr. Seuss books . . . can be read and enjoyed on several levels. For
example, 'One Fish Two Fish, Red Fish Blue Fish' can be deconstructed
as a searing indictment of the narrow-minded binary counting system.
  -- Peter van der Linden, Expert C Programming, Deep C Secrets


--------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
--------------------------------------------------------------------

Reply via email to