William D. Colburn (aka Schlake) <[EMAIL PROTECTED]> wrote: > Our webserver was recently forced behind a firewall. We got them to > forward the ip addresses of the client to us, but they sometimes come > in multiples. So, instead of a single hostname we got a comma > seperated list of hostnames in the logs, and analog tags it as a > corrupt line. > > I've searched around for way to make analog parse this, but I can't > find anything. Surely we aren't the first people to encounter this? > > Here is what the normal line looks like, followed by what the > multiple-host lines look like: > > <hostnameofproxy> <ipaddr> - - <etc> > <hostnameofproxy> <ipaddr>, <ipaddr> - - <etc> > <hostnameofproxy> <ipaddr>, <ipaddr>, <ipaddr> - - <etc>
Is your web server creating these log entries, or is this some other file you're getting from your firewall (proxy server?)? What are the extra IP addresses? If they're just junk, you could create multiple logfile formats to discard them (though it would be easier if they used a single delimiter for the whole list of IP addresses). Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
