In <002e01c2d1ee$e3f96830$[EMAIL PROTECTED]>, "Aengus" <[EMAIL PROTECTED]> writes:
> That's a lot of unnecessary work, unless you happen to need a modified
> copy of your log file for some other process.

True but other applications (such as the DNS helper applications) would have 
difficulty analyzing the log too, so filtering out the extra addresses would 
make sense.

Of course this could be done when writing the logs, instead of in
analog, like this (if server load is not a major concern):

AccessLog logformat "| postprocess.pl > access_log"

postprocess.pl
#!/usr/bin/perl -n -p -w
s/^(\d+\.\d+\.\d+\.\d+)\S*\s/$1 /;

-- 
Klaus Johannes Rusch
[EMAIL PROTECTED]
http://www.atmedia.net/KlausRusch/
+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  Digest version: http://lists.isite.net/listgate/analog-help-digest/
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
+------------------------------------------------------------------------

Reply via email to