RE: [analog-help] Logformat

2002-06-14 Thread analog-help
Title: RE: [analog-help] Logformat






No, but isn't it possible to run Analog with it?


Thanks.


-Mensaje original-

De: Agustin Chernitsky [mailto:[EMAIL PROTECTED]]

Enviado el: jueves, 13 de junio de 2002 16:24

Para: [EMAIL PROTECTED]

Asunto: Re: [analog-help] Logformat



SuSana,


Esto es un log de un Web Server?



ENG: Is this a log of a web server?



From: SUSANA PUMAR PAVON [EMAIL PROTECTED]

Reply-To: [EMAIL PROTECTED]

To: Analog-Help (E-mail) [EMAIL PROTECTED]

Subject: [analog-help] Logformat

Date: Thu, 13 Jun 2002 12:03:21 +0200



Hi all!



Now I have got a different log format, from a specific application. I

have tried to use the command LOGFORMAT but I did get a good result.

Could any of you help me, please?



These are lines from the log:

[12/06/2002 11:05:58:700]|/Naveg. Libre|1299790|anonimo|TINY_HTML

[12/06/2002 11:06:04:167]|/Naveg. Libre|1299790|anonimo|TINY_HTML

[12/06/2002 11:06:05:919]|/Naveg.

Libre/Finanzas|1299790|anonimo|TINY_HTML

[12/06/2002 11:06:10:503]|/Naveg.

Libre/Finanzas/Invertia|1299790|anonimo|TINY_HTML

[12/06/2002 11:06:17:451]|/Naveg.

Libre/Finanzas/Noticias|1299790|anonimo|TINY_HTML

[12/06/2002 11:10:37:343]|/Naveg. Libre|1299790|anonimo|TINY_HTML



and the meanings:

date | services | user | session | dispositive



Thanks a lot,

Susana Pumar Pavón







_

MSN Photos is the easiest way to share and print your photos: 

http://photos.msn.com/support/worldwide.aspx


+

| This is the analog-help mailing list. To unsubscribe from this

| mailing list, go to

| http://lists.isite.net/listgate/analog-help/unsubscribe.html

|

| List archives are available at

| http://www.mail-archive.com/analog-help@lists.isite.net/

| http://lists.isite.net/listgate/analog-help/archives/

| http://www.tallylist.com/archives/index.cfm/mlist.7

+





[analog-help] BROWOUTPUTALIAS

2002-06-14 Thread analog-help

Upgraded from analog 3.11 to the latest version. Is BROWOUTPUTALIAS no longer 
supported/used by Analog 5.x? Should all entries for it be removed from the analog 
3.11 cfg file?

Leslie Bell
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] BROWOUTPUTALIAS

2002-06-14 Thread analog-help

Bell, Leslie wrote:
 
 Upgraded from analog 3.11 to the latest version. Is BROWOUTPUTALIAS no longer 
supported/used by Analog 5.x? Should all entries for it be removed from the analog 
3.11 cfg file?

The BROW* alias configuration directives are BROWALIAS and BROWREPALIAS.

-- 
Klaus Johannes Rusch
[EMAIL PROTECTED]
http://www.atmedia.net/KlausRusch/
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



RE: [analog-help] BROWOUTPUTALIAS

2002-06-14 Thread analog-help

Thank you. What do they mean? What should they be used for? What should they be set to?

Leslie Bell

 -Original Message-
 From: Klaus Johannes Rusch [mailto:[EMAIL PROTECTED]]
 Sent: 14 June 2002 09:40
 To: [EMAIL PROTECTED]
 Subject: Re: [analog-help] BROWOUTPUTALIAS
 
 
 Bell, Leslie wrote:
  
  Upgraded from analog 3.11 to the latest version. Is 
 BROWOUTPUTALIAS no longer supported/used by Analog 5.x? 
 Should all entries for it be removed from the analog 3.11 cfg file?
 
 The BROW* alias configuration directives are BROWALIAS and 
 BROWREPALIAS.
 
 -- 
 Klaus Johannes Rusch
 [EMAIL PROTECTED]
 http://www.atmedia.net/KlausRusch/
 +-
 ---
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +-
 ---
 
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



[analog-help] Search word alias

2002-06-14 Thread analog-help

Hello all,

I'm a happy Analog user and would be even more glad if someone could tell me
if there is a way to generate the Search Word Report so as to have a list of
generic words.
I'd like to combine all the different forms of a word into a generic one :
- word = {Word, words, WORD, wordz}
or
- fruit = {Fruit, apple, banana, orange} etc.

If this function is not possible with Analog (yet?), do you know a software
that can do it?

Thank you for your help

Kéa NOP

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] Requests Report

2002-06-14 Thread analog-help

Christine Rorer [EMAIL PROTECTED] wrote:

 I have just downloaded Analog 5.23 and am beginning to use it.  On the
 Request Report, the html pages are links so that they can be clicked
 on and you will be taken to the page.  I am currently running this on
 my local machine with Windows 98 (I've ftp'd the logs there) and when
 the report is created (on my C:\drive), the links have the prefix of
 C:\\, rendering them not useful.  I'd like the links to have the
 prefex of the URL, so that when they are clicked on, they take you to
 the actual web page.  Where is the setting for this?

BASEURL

http://www.analog.cx/docs/othreps.html#BASEURL

Aengus


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] First-time user

2002-06-14 Thread analog-help

Kar Yan Mak [EMAIL PROTECTED] wrote:

 Thanks for all the replies. I've added these two lines to analog.cfg:

 DNSFILE dnscache
 DNS WRITE

 When I run Analog for the first time, it would say:
 [C:\...] analog.exe: analog version 5.23/Win32
 [C:\...] analog.exe: Warning F: Failed to open DNS input file
 [C:\...]dnscache: ignoring it

 When I run Analog for the second time, it would say:
 [C:\...] analog.exe: analog version 5.23/Win32
 [C:\...] analog.exe: Warning F: DNS lock file [C:\...]dnslock already
 exists: backing off to DNS LOOKUP

There shouldn't be a DNS lock file, unless you have a DNSLOCKFILE
directive in your configuration. And even if you do, it should be
deleted when Analog completes successfully. But you shouldn't need it if
you are running Analog on your desktop, and don't have to worry about
two copies of Analog writing to the same DNS file at the same time.

 If I haven't mistaken, DNS LOOKUP is just to look up DNS but no DNS
 file is created.  Then that means that every time I will have to look
 up the DNS when analyzing the weekly logs?  BTW, the DNS LOOKUP works
 properly.

Use one of the DNS helper apps and set Analog to use DNS READ.
http://www.analog.cx/helpers/index.html#dns

Aengus

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] Requests Report

2002-06-14 Thread analog-help

In [EMAIL PROTECTED], Christine Rorer [EMAIL PROTECTED] 
writes:
 I have just downloaded Analog 5.23 and am beginning to use it.  On the
 Request Report, the html pages are links so that they can be clicked on and
 you will be taken to the page.  I am currently running this on my local
 machine with Windows 98 (I've ftp'd the logs there) and when the report is
 created (on my C:\drive), the links have the prefix of C:\\, rendering them
 not useful.  I'd like the links to have the prefex of the URL, so that when
 they are clicked on, they take you to the actual web page.  Where is the
 setting for this?  In other words, why do the Request Report links default
 to my c:\ drive?

Because you have not told analog where you want them linked to. See the section
Other reports in the documentaiton for details on the required parameters.

-- 
Klaus Johannes Rusch
[EMAIL PROTECTED]
http://www.atmedia.net/KlausRusch/
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



RE: [analog-help] Requests Report

2002-06-14 Thread analog-help

Thanks!

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Aengus
Sent: Friday, June 14, 2002 5:28 AM
To: [EMAIL PROTECTED]
Subject: Re: [analog-help] Requests Report


Christine Rorer [EMAIL PROTECTED] wrote:

 I have just downloaded Analog 5.23 and am beginning to use it.  On the
 Request Report, the html pages are links so that they can be clicked
 on and you will be taken to the page.  I am currently running this on
 my local machine with Windows 98 (I've ftp'd the logs there) and when
 the report is created (on my C:\drive), the links have the prefix of
 C:\\, rendering them not useful.  I'd like the links to have the
 prefex of the URL, so that when they are clicked on, they take you to
 the actual web page.  Where is the setting for this?

BASEURL

http://www.analog.cx/docs/othreps.html#BASEURL

Aengus


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



RE: [analog-help] Logformat

2002-06-14 Thread analog-help

Yes, you could... still, the information on the report may not be 
accurate

You have to customize your log using LOGFORMAT command

LOGFORMAT ([%d/%M/%Y %h:%m:%j:%j]|/%j|%j|%j|%j)

replace %j with the ones according to your log... I don´t have the vars list 
here!

From: SUSANA PUMAR PAVON [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: RE: [analog-help] Logformat
Date: Fri, 14 Jun 2002 08:55:47 +0200

No, but isn't it possible to run Analog with it?

Thanks.

-Mensaje original-
De: Agustin Chernitsky [mailto:[EMAIL PROTECTED]]
Enviado el: jueves, 13 de junio de 2002 16:24
Para: [EMAIL PROTECTED]
Asunto: Re: [analog-help] Logformat


SuSana,

Esto es un log de un Web Server?


ENG: Is this a log of a web server?


 From: SUSANA PUMAR PAVON [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 To: Analog-Help (E-mail) [EMAIL PROTECTED]
 Subject: [analog-help] Logformat
 Date: Thu, 13 Jun 2002 12:03:21 +0200
 
 Hi all!
 
 Now I have got a different log format, from a specific application. I
 have tried to use the command LOGFORMAT but I did get a good result.
 Could any of you help me, please?
 
 These are lines from the log:
 [12/06/2002 11:05:58:700]|/Naveg. Libre|1299790|anonimo|TINY_HTML
 [12/06/2002 11:06:04:167]|/Naveg. Libre|1299790|anonimo|TINY_HTML
 [12/06/2002 11:06:05:919]|/Naveg.
 Libre/Finanzas|1299790|anonimo|TINY_HTML
 [12/06/2002 11:06:10:503]|/Naveg.
 Libre/Finanzas/Invertia|1299790|anonimo|TINY_HTML
 [12/06/2002 11:06:17:451]|/Naveg.
 Libre/Finanzas/Noticias|1299790|anonimo|TINY_HTML
 [12/06/2002 11:10:37:343]|/Naveg. Libre|1299790|anonimo|TINY_HTML
 
 and the meanings:
 date | services | user | session | dispositive
 
 Thanks a lot,
 Susana Pumar Pavón
 




_
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx

+---
-
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+---
-




_
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



RE: [analog-help] Requests Report

2002-06-14 Thread analog-help

Actually, the BASEURL didn't do it for me, I had to use the 2nd parameter
for the LOGFILE command as explained below:

There is also an optional second argument to the LOGFILE command, which
specifies a prefix to add to all the filenames in that logfile. This is
useful if you've got several different servers or virtual hosts, when the
same filename may occur on each of the servers. For example,
LOGFILE mydomain.log http://www.mydomain.com

Now, I see it in my *.dat file created from Analog.  Here is a clip:

https://claws.sxu.edu/datatel/openweb/startovermsg.html
r   lRbD1   22  0.019   200206  11  10  55

Yet, the html file that is created using Report Magic doesn't incorporate
this!  My REQUEST.html clip for this line is:

td class=alt1a href=/datatel/openweb/startovermsg.html
target=_topb/datatel/openweb/startovermsg.html/b/a/tdtd
class=alt1 align=RIGHTb35/b/td

Any idea why the *.dat file doesn't seem to be translating correctly when I
use Report Magic???



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Aengus
Sent: Friday, June 14, 2002 5:28 AM
To: [EMAIL PROTECTED]
Subject: Re: [analog-help] Requests Report


Christine Rorer [EMAIL PROTECTED] wrote:

 I have just downloaded Analog 5.23 and am beginning to use it.  On the
 Request Report, the html pages are links so that they can be clicked
 on and you will be taken to the page.  I am currently running this on
 my local machine with Windows 98 (I've ftp'd the logs there) and when
 the report is created (on my C:\drive), the links have the prefix of
 C:\\, rendering them not useful.  I'd like the links to have the
 prefex of the URL, so that when they are clicked on, they take you to
 the actual web page.  Where is the setting for this?

BASEURL

http://www.analog.cx/docs/othreps.html#BASEURL

Aengus


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



[analog-help] DNS reporting

2002-06-14 Thread analog-help

I am using analog 4.02 on UNIX system. I just started DNS logging. It 
is writing to the file and doing DNS lookups, but there are IP 
addresses in the host report that aren't in the DNS log file. Also 
the DNS lookups return many more domains than show up in the host 
report.
I have  DNSFILE dnscache.txt and DNS WRITE in my config file. I 
expected that any domain names listed in the DNS cache file would 
replace the IP address listed in the host report and that all IP's 
would be listed in the DNS cache file.

Thanks in advance!

-- 
Natasha Rajack Gallaty
Manager of Project Coordination
Morris Digital Works
voice: 706.828.2918
cell: 706.951.6041
AOL IM: natasha2918
www.morris.com
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] DNS reporting

2002-06-14 Thread analog-help

Natasha R . Gallaty [EMAIL PROTECTED] wrote:

 I am using analog 4.02 on UNIX system. I just started DNS logging. It
 is writing to the file and doing DNS lookups, but there are IP
 addresses in the host report that aren't in the DNS log file. Also
 the DNS lookups return many more domains than show up in the host
 report.

Can you post some examples? And be more specific in your terminology.
The Host report reports hosts, not domains.

 I have  DNSFILE dnscache.txt and DNS WRITE in my config file. I
 expected that any domain names listed in the DNS cache file would
 replace the IP address listed in the host report and that all IP's
 would be listed in the DNS cache file.

You can expect about 1/3 of your hosts not to resolve at all.

Aengus



+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



RE: [analog-help] Requests Report

2002-06-14 Thread analog-help

Totally my blow.  I was using my dat file from yesterday.  Problem resolved.
Thanks for all of your help!

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Aengus
Sent: Friday, June 14, 2002 5:28 AM
To: [EMAIL PROTECTED]
Subject: Re: [analog-help] Requests Report


Christine Rorer [EMAIL PROTECTED] wrote:

 I have just downloaded Analog 5.23 and am beginning to use it.  On the
 Request Report, the html pages are links so that they can be clicked
 on and you will be taken to the page.  I am currently running this on
 my local machine with Windows 98 (I've ftp'd the logs there) and when
 the report is created (on my C:\drive), the links have the prefix of
 C:\\, rendering them not useful.  I'd like the links to have the
 prefex of the URL, so that when they are clicked on, they take you to
 the actual web page.  Where is the setting for this?

BASEURL

http://www.analog.cx/docs/othreps.html#BASEURL

Aengus


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] DNS reporting

2002-06-14 Thread analog-help

I'm new at this, so please forgive my ignorance. But I thought the 
Host report shows the IP's of the computers that visited my site and 
that the DNS lookups translated the IP's into names.

My confusion came from the fact that not ALL of the IP's listed in my 
Host Report are listed in my DNS cache file (I realize, now, that not 
all IP's will resolve).  Also, not all of the names found by the DNS 
lookup are translated in the host report, but some are.

Here is an example:
 From Host Report:
760:  0.59%: 216.239.46.26 (this IP is not found in dnscache.txt, but 
name resolves with nslookup)

 From dnscache.txt:
17066694 64.65.238.214 host-64-65-238-214.choiceone.net

But the same IP from Host Report is not translated
512:  0.47%: 64.65.238.214

If I'm just confused about what the result is supposed to be, please 
let me know.

Natasha


Natasha R . Gallaty [EMAIL PROTECTED] wrote:

  I am using analog 4.02 on UNIX system. I just started DNS logging. It
  is writing to the file and doing DNS lookups, but there are IP
  addresses in the host report that aren't in the DNS log file. Also
  the DNS lookups return many more domains than show up in the host
  report.

Can you post some examples? And be more specific in your terminology.
The Host report reports hosts, not domains.

  I have  DNSFILE dnscache.txt and DNS WRITE in my config file. I
  expected that any domain names listed in the DNS cache file would
  replace the IP address listed in the host report and that all IP's
  would be listed in the DNS cache file.

You can expect about 1/3 of your hosts not to resolve at all.

Aengus



+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] DNS reporting

2002-06-14 Thread analog-help

Natasha R . Gallaty [EMAIL PROTECTED] wrote:

 Here is an example:
  From Host Report:
 760:  0.59%: 216.239.46.26 (this IP is not found in dnscache.txt, but
 name resolves with nslookup)

That can sometimes happen if the server responsible for that IP address
is slow. When you did the original lookup, it timed out before the
response came back. When you did a subsequent lookup it worked.
Normally, that kind of situation is lost in the noise of the 30% or so
of hosts that don't resolve at all, and so it's ignored.

If you use a 3rd party tool like QDNS, you can strip out addresses that
were marked as unresolved, and try again. Addresses that were resolved
the first time will still be in the file, and so won't be looked up, but
addressed that weren't resolved the first time will be treated as new,
and will be looked up, and some of them may resolve on the second run.
(You could probably do the same with Analog by using grep or findstring
to discard all the lines with * in the DNS cache file).

  From dnscache.txt:
 17066694 64.65.238.214 host-64-65-238-214.choiceone.net

 But the same IP from Host Report is not translated
 512:  0.47%: 64.65.238.214

 If I'm just confused about what the result is supposed to be, please
 let me know.

No, you're right, I would have expected that one to be used in the Host
Report. I don't have any explanation of why it wouldn't be. In fact,
when I put that line into a test DNS file, and put the IP number is a
test log file, my Host Report does use the name.

Aengus

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



[no subject]

2002-06-14 Thread analog-help

Hello,
Here, I am using analog for reports from  log files
created by ezproxy Server  
to monitor licensed databases controlled by external
servers.

Reports with a list of requests per site 
which will be part of the %r field in one line of the
log file.

For eg,
136.186.67.139 - - [28/Mar/2002:17:17:12 +1100] GET
http://babelfish.altavista.com:80/ HTTP/1.0 200 7005 

I need to focus only on the 
http://babelfish.astavista.com 
and would want the out put similar to the directory
report.

 Can I customize the directory report?? 

2. Also, Ineed to configure the output to spread sheet
compatible format.
I have read through the section in the readme.html. Do
I understand correctly that I need to put in the
following commands in the analog.cfg

OUT PLAIN
COMPSEP ,
OUTFILE testoutputfile.txt



__
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



[analog-help] Can

2002-06-14 Thread analog-help

Hello,
Here, I am using analog for reports from  log files
created by ezproxy Server  
to monitor licensed databases controlled by external
servers.

Reports with a list of requests per site 
which will be part of the %r field in one line of the
log file.

For eg,
136.186.67.139 - - [28/Mar/2002:17:17:12 +1100] GET
http://babelfish.altavista.com:80/ HTTP/1.0 200 7005 

I need to focus only on the 
http://babelfish.astavista.com 
and would want the out put similar to the directory
report.

 Can I customize the directory report?? 

2. Also, Ineed to configure the output to spread sheet
compatible format.
I have read through the section in the readme.html. Do
I understand correctly that I need to put in the
following commands in the analog.cfg

OUT PLAIN
COMPSEP ,
OUTFILE testoutputfile.txt



__
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



[analog-help] Can anyone please help me??

2002-06-14 Thread analog-help

Hello all,
I am resending this mail as I need some quick help
with the following. If anyone is seeing it second
time, please do bear with me.
Here, I am using analog for reports from  log files
created by ezproxy Server  
to monitor licensed databases controlled by external
servers.

Reports with a list of requests per site 
which will be part of the %r field in one line of the
log file.

For eg,
136.186.67.139 - - [28/Mar/2002:17:17:12 +1100] GET
http://babelfish.altavista.com:80/ HTTP/1.0 200 7005 

I need to focus only on the 
http://babelfish.astavista.com 
and would want the out put similar to the directory
report.

 Can I customize the directory report?? 

2. Also, Ineed to configure the output to spread sheet
compatible format.
I have read through the section in the readme.html. Do
I understand correctly that I need to put in the
following commands in the analog.cfg

OUT PLAIN
COMPSEP ,
OUTFILE testoutputfile.txt
It would be a great help , if any one could suggest 
a way around for the above issues.
Thanks
uma



__
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com
+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+