Can someone suggest a working logformat to identify the browser correctly?

Following are examples of typical log entries in a log file (monthly 
log circa 200 mb). I am showing only the end part of each line, the 
part that is problematic:

200 3456 ScoutAbout -
200 657151 Mozilla/3.01 (compatible;) -
200 9010 Mozilla/4.7 [de] (WinNT; I)
200 8502 Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Fetch API Request -
200 13722 Mozilla/4.7 [de] (WinNT; I) http://www/
200 11635 Mozilla/4.0 (compatible; MSIE 6.0; Windows 98) 
http://www/zeigen.html?seite=212
200 0 Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+98) 
http://www.dfn.de/links/schule.html
200 27139 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)
200 13435 FAST-WebCrawler/3.3 ([EMAIL PROTECTED];
200 29811 FAST-WebCrawler/3.3 ([EMAIL PROTECTED]; 
http://fast.no/support.php?c=faqs/crawler) -

The number of words identifying browser varies and there are no tabs 
separating the browser info from referred data. I try

%c %b %B %f
%c %b %A %f
%c %b -
%c - -

but this takes only word 1 of the browser info as browser data and 
uses the rest as referrer. I tried

%c %b %B http://%f

but that results in most entries reported as corrupted. The docs are 
somewhat skimpy about dealing with varying information.

Using the AUTO logformat does not work, in case someone wonders. I tried.

Robert
+------------------------------------------------------------------------
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|    http://www.mail-archive.com/analog-help@lists.isite.net/
|    http://lists.isite.net/listgate/analog-help/archives/
|    http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------

Reply via email to