Re: [analog-help] Analog report filter

2001-10-17 Thread Lance Rochelle 

first off I would recommend upgrading if you can to 5.03
then
look at this section of the manual

http://www.analog.cx/docs/othreps.html#FLOOR


you would want something like the following
HOSTFLOOR -10r

lance
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 17, 2001 9:16 PM
Subject: [analog-help] Analog report filter


 Hi, all

 I am quite new to Analog.
 I am using Unix(Solaris) version analog4.16 for my web server statistics.
 My question is: how can I control the lines of each report? For example,
in
 Request Report  I only want the report to list the top 10 addresses.
Does
 Analog have such function?

 Thanks in advance.





 regards


 +
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

Re: [analog-help] MS IIS4 MS IIS Log file Format (from FTP)

2001-10-16 Thread Lance Rochelle 
Title: MS IIS4 MS IIS Log file Format (from FTP)



analog -settings 
this may show you where the error is if not 


look for 
'debug on' in the documentation on the 
website

lance

for the summary report what does the unwanted 
logfiles say and what does the corrupt logfiles say



  - Original Message - 
  From: 
  Andrew Gaskell 
  To: '[EMAIL PROTECTED]' 
  
  Sent: Tuesday, October 16, 2001 10:21 
  AM
  Subject: [analog-help] MS IIS4 MS IIS Log 
  file Format (from FTP)
  
  Hi All, I've 
  just started using analog today and I would really appreciate some help, or a 
  pointer to the correct documentation.
  I am using MS IIS Log file format and the log files 
  are from ftp server connections. 
  Here's a snippet from my log file 
  xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:14, 
  MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 331, 0, [1038]USER, someuser, 
  -,
  xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:14, 
  MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 230, 0, [1038]PASS, -, 
  -, xx.xxx.xx.xxx, somecuser, 10/8/01, 
  8:01:18, MSFTPSVC1,myservername, yy.yy.yyy.yyy, 0, 0, 0, 226, 0, [1038]sent, 
  /mydir/myfile.rtf, -,
  xx.xxx.xx.xxx, someuser, 10/8/01, 8:01:19, 
  MSFTPSVC1, myservername, yy.yy.yyy.yyy, 701, 0, 734, 226, 0, [1038]sent, 
  /mydir/myfile.rtf, -,
  xx.xxx.xx.xxx, someuser, 10/8/01, 8:20:00, 
  MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 331, 0, [1039]USER, someuser, 
  -,
  xx.xxx.xx.xxx, somecuser, 10/8/01, 8:20:00, 
  MSFTPSVC1, myservername, yy.yy.yyy.yyy, 0, 0, 0, 230, 0, [1039]PASS, -, 
  -, 
  Here's my cfg file with comments removed: 
  
  LOGFILE in011008.log OUTFILE Report.html ALL ON 
  
  However all I get in my report is 
  Successful requests: 0 
  Please can someone advise me on what I am doing 
  wrong? I have tried using LOGFORMAT MICROSOFT-INT2, but this makes no difference.
  Thanks Andrew

Re: [analog-help] Re[2]: Help with Apache LogFormat

2001-10-03 Thread Lance Rochelle 

it is automatic in the combined format

lance
- Original Message -
From: Søren Neigaard [EMAIL PROTECTED]
To: Lance Rochelle [EMAIL PROTECTED]
Sent: Wednesday, October 03, 2001 12:27 PM
Subject: [analog-help] Re[2]: Help with Apache LogFormat


Wednesday, October 03, 2001, 12:14:58 AM, Lance wrote:

LR first off you need to find the httpd.conf file in apache then go down
the
LR section for logging it will look something like the following
I have gotten that far :)

LR you will want to either use combined or create one and call it
commonandos
LR or something of that nature
LR then you will need to recycle apache (obviously
LR if you use combined you will not need to change LOGFORMAT in analog or
even
LR have it in there it should pick it up automatically
Ok - I understand. But how do I enable logging of the clients
Operating System in Apache?

--
Med venlig hilsen/Best regards,
 Søren Neigaard mailto:[EMAIL PROTECTED]


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

Re: Re[2]: [analog-help] Re[2]: Help with Apache LogFormat

2001-10-03 Thread Lance Rochelle 

http://www.analog.cx/docs/alias.html

BROWALIAS I believe is what you are looking for

lance
- Original Message -
From: Søren Neigaard [EMAIL PROTECTED]
To: Lance Rochelle [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, October 03, 2001 2:24 PM
Subject: Re[2]: [analog-help] Re[2]: Help with Apache LogFormat


Wednesday, October 03, 2001, 6:47:19 PM, Lance wrote:

LR it is automatic in the combined format
Ok - Thanks. Sometimes I have to trust that you people is right, and
just try what you say :)

Theres just one thing... Analog recognize my Mozilla 0.9.4 as
Netscape. Can I change this?

--
Med venlig hilsen/Best regards,
 Søren Neigaard mailto:[EMAIL PROTECTED]


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

Re: [analog-help] Help with Apache LogFormat

2001-10-02 Thread Lance Rochelle 

first off you need to find the httpd.conf file in apache then go down the
section for logging it will look something like the following
#
# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a VirtualHost
# container, error messages relating to that virtual host will be
# logged here.  If you *do* define an error logfile for a VirtualHost
# container, that host's errors will be logged there and not here.
#
ErrorLog /usr/local/apache/logs/error_log

#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel crit

#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
#
LogFormat %h %l %u %t \%r\ %s %b \%{Referer}i\ \%{User-Agent}i\
combine
d
LogFormat %h %l %u %t \%r\ %s %b common
LogFormat %{Referer}i - %U referer
LogFormat %{User-agent}i agent

#
# The location and format of the access logfile (Common Logfile Format).
# If you do not define any access logfiles within a VirtualHost
# container, they will be logged here.  Contrariwise, if you *do*
# define per-VirtualHost access logfiles, transactions will be
# logged therein and *not* in this file.
#
#CustomLog /usr/local/apache/logs/access_log common

#
# If you would like to have agent and referer logfiles, uncomment the
# following directives.
#
#CustomLog /usr/local/apache/logs/referer_log referer
#CustomLog /usr/local/apache/logs/agent_log agent

#
# If you prefer a single logfile with access, agent, and referer information
# (Combined Logfile Format) you can use the following directive.
#
CustomLog /usr/local/apache/logs/access_log combined



you will want to either use combined or create one and call it commonandos
or something of that nature


then you will need to recycle apache (obviously

if you use combined you will not need to change LOGFORMAT in analog or even
have it in there it should pick it up automatically

lance


 Original Message -
From: Søren Neigaard [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, October 02, 2001 5:57 PM
Subject: [analog-help] Help with Apache LogFormat


I would like to add browser and OS stat to my Apache log file. Here is
what I have, would that do for browser, and can I just write as it is
here, in my analog.cfg file?

LogFormat %h %l %u %t \%r\ %s %b %T \%{Referer}i\ \%{User-Agent}i\
custom

How do I enable OS logging in Apache?

--
Med venlig hilsen/Best regards,
 Søren Neigaard mailto:[EMAIL PROTECTED]
--
 Memory is like an orgasm. It's a lot better if you don't have to fake it.


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

Re: [analog-help] Help with configuring Analog 5.03--Report doesn't work

2001-10-02 Thread Lance Rochelle 

not a prob
lance
- Original Message -
From: Charles Walker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 03, 2001 12:36 AM
Subject: Re: [analog-help] Help with configuring Analog 5.03--Report doesn't
work


 Hi Lance,

 I was about to give up tonight.  I couldn't duplicate on my machine the
 results you sent me until I moved the entire Analog 5.03 application to
 my C: drive (it was on D:) and changed the forward slashes in the
 LOGFILE into back slashes.  I also removed all spaces in the folder
 names of the relevant subdirectories on my hard drive. Then it the
 program worked. I have a UNIX server, and I guess it's really fussy about
 paths!

 Thanks so much for all your help.

 Charlie

 --ORIGINAL FILE
BELOW--

 Hi...

 I've just installed Analog 5.03 on my system; I specified the LOGFILE,
 HOSTNAME  and HOSTURL. When I run the program and then open the
 Report.html file in my browser, all it displays is the HOSTNAME (as a
 hyperlink to the URL). Successful Requests equals (), and no other info
 from the rather long logfile is displayed. The LOGFILE is located thus:

 LOGFILE D:\WebAttack\mylogfiles\webLog.cgi

 Because the logfile format is different than the examples in the
 documentation,  I tried reconfiguring it...to no avail.  Here's one record
 from my logfile along with the LOGFORMAT code I wrote:

 24.226.0.226 - - [16/Sep/2001:17:44:24 -0400] GET /sydenham
 HTTP/1.0 301 241 - Mozilla/4.0 (compatible; MSIE 5.5; Windows 98;
 AtHome0107)

 LOGFORMAT (%s - - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b
 %f %B)

 Could the problem be caused because I'm using Windows ME? Or?

 Charlie Walker

 +
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

Re: [analog-help] Help with configuring Analog 5.03--Report doesn't work

2001-10-01 Thread Lance Rochelle 


- Original Message -
From: Charles Walker [EMAIL PROTECTED]
To: analog help list [EMAIL PROTECTED]
Sent: Tuesday, October 02, 2001 12:08 AM
Subject: [analog-help] Help with configuring Analog 5.03--Report doesn't
work


 Hi...
 I've just installed Analog 5.03 on my system; I specified the LOGFILE,
HOSTNAME and HOSTURL. When I run the program, DOS opens briefly
 and seems to access the logfile which I have downloaded and specified in
my analog.cfg file.  However, when I open the Report.html file in my
 browser, all it displays is the HOSTNAME (as a hyperlink to the URL).
Successful Requests equals (), and no other info from the rather long
 logfile is displayed. The LOGFILE is located thus:

 LOGFILE D:\WebAttack\mylogfiles\webLog.cgi

 Because the logfile format is different than the examples in the
documentation, I tried reconfiguring it...to no avail.  Here's one record
from my
 logfile along with the LOGFORMAT code I wrote:

 24.226.0.226 - - [16/Sep/2001:17:44:24 -0400] GET /sydenham HTTP/1.0 301
241 - Mozilla/4.0 (compatible; MSIE 5.5; Windows 98;
 AtHome0107)


This logfile is common well combined even analog should pick it up
automatically but if it doesn't i would reaplace the two -'s below tih %j %j
bu my log file looks as this
bgm-66-24-154-154.stny.rr.com - - [01/Oct/2001:23:15:43 -0500] GET
/images/cartoons/archives/01oct/xuf003501.gif HTTP/1.1 304 -
http://www.lancerochelle.com/index.php; Mozilla/4.0 (compatible; MSIE 6.0;
Windows 98)
and i don't use logformat


 LOGFORMAT (%s - - [%d/%M/%Y:%h:%n:%j %j] %j %r %j %c %b %f %B)

 Could the problem be caused because I'm using Windows ME? Or?

 Charlie Walker





Lance Rochelle
[EMAIL PROTECTED]
http://lancerochelle.com
(607) 775-2681
---
Being a Systems Administrator is like
hitting yourself in the bead with a brick.
After a while you don't feel the pain.


 +
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+

Re: [analog-help] IIS5 browser statistics and Analog

2001-09-24 Thread Lance Rochelle 

run it with SETTINGS ON  and post the errors it displays
(if i remember the command correctly,)
http://www.analog.cx/docs/syntax.html#settings
the file should show yout what is wrong otherwise post the errors from
that here 

Lance
- Original Message -
From: Darek [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, September 24, 2001 8:50 AM
Subject: Re: [analog-help] IIS5 browser statistics and Analog


 Unfortunately, it still does not work.
 Below is an example from my log file, perhaps I am doing something
 wrong.

 #Software: Microsoft Internet Information Services 5.0
 #Version: 1.0
 #Date: 2001-04-08 09:40:43
 #Fields: date time c-ip cs-username s-sitename s-computername s-
 ip s-port cs-met hod cs-uri-stem cs-uri-query sc-status time-taken
 cs-version cs-host cs(User-Age nt) cs(Referer)

 2001-04-03 09:40:43 195.116.93.5 - W3SVC1computer
 111.111.111.111 80 GET /las/zamek.htm - 200 310 HTTP/1.1
 computer.domain.com
 Mozilla/4.0+(compatible;+MSIE+5.0;+Windows+98;+DigExt)
 http://szukaj.wp.pl/szukaj.html?szukaj=zamek+ska%B3az=Tr=T

 Darek


  On 24 Sep 2001, at 8:32, Darek wrote:
 
   Lance,
  
   Thank you for your suggestion, but what do you mean putting # in
   front of LOGFORMAT ? #LOGFORMAT ? This would be comment if
   understand properly...
  
 
  Exactly...  Comment out the LOGFORMAT statement, and let
  Analog auto-detect the log file format.
 
 
  ===
  Blessed are the pessimists, for they make backups!
  ===
 
 
+
  |  This is the analog-help mailing list. To unsubscribe from this
  |  mailing list, go to
  |http://lists.isite.net/listgate/analog-help/unsubscribe.html
  |
  |  List archives are available at
  |http://www.mail-archive.com/analog-help@lists.isite.net/
  |http://lists.isite.net/listgate/analog-help/archives/
  |http://www.tallylist.com/archives/index.cfm/mlist.7
 
+


 +
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+