Aengus wrote:
> Okay, the X-Forwarded-For header can contain multiple IP addresses if
> the request passes through multiple proxy servers - it's not supposed to
> be multiple requests rolled up in a single log entry.
>
> Your best bet would be to use an Apache module to discard the additional
> proxy server addresses, but if not, then multiple logformats to junk the
> additional addresses should work.
Alternatively strip the extra information in a preprocessing step, something
like
UNCOMPRESS *.gz preprocess.pl
# preprocess.pl
...
while(<>) {
s/^(\d+\.\d+\.\d+\.\d+)\S*\s/$1 /;
print;
}
--
Klaus Johannes Rusch
[EMAIL PROTECTED]
http://www.atmedia.net/KlausRusch/
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------
