Klaus Johannes Rusch <[EMAIL PROTECTED]> wrote:
> Aengus wrote:
>
>> Okay, the X-Forwarded-For header can contain multiple IP addresses if
>> the request passes through multiple proxy servers - it's not
>> supposed to be multiple requests rolled up in a single log entry.
>>
>> Your best bet would be to use an Apache module to discard the
>> additional proxy server addresses, but if not, then multiple
>> logformats to junk the additional addresses should work.
>
> Alternatively strip the extra information in a preprocessing step,
> something like
>
> UNCOMPRESS *.gz preprocess.pl
>
> # preprocess.pl
> ...
> while(<>) {
> s/^(\d+\.\d+\.\d+\.\d+)\S*\s/$1 /;
> print;
> }
That's a lot of unnecessary work, unless you happen to need a modified
copy of your log file for some other process.
Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| Digest version: http://lists.isite.net/listgate/analog-help-digest/
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------
