Re: [analog-help] Counting multiple fields

2002-03-25 Thread A . Browne
Sorry, I wasn't clear. It gives the total number of _all_ cookies - what I need is the total number of the cookies individually. In other words, the %jidl_visitor=%u;%j string doesn't seem to be making any difference. Adam > Jeremy Wadsack wrote: Isn't that what you want to do? Count the

[analog-help] Automating analog

2002-03-25 Thread SUSANA PUMAR PAVON
What I'd like to do is to get information from the logs of the last seven days. The way I try to do that is as follows: FROM -00-00-07 TO -00-00-01 LOGFILE /log/http/iobox.com/access.log-%Y-%M* The problem is that Analog reads all the log files of the current month, although it only gets the

Re: [analog-help] Counting multiple fields

2002-03-25 Thread Jeremy Wadsack
I'm not sure if I'm following you, but if you're saying you have lines with this cookie and lines that don't have the cookie, then you'll need to add an additional LOGFORMAT to read the lines that don't have the cookie (otherwise Analog will tell you they are corrupt.) I had assumed you had alre

Re: [analog-help] Automating analog

2002-03-25 Thread Jeremy Wadsack
SUSANA PUMAR PAVON ([EMAIL PROTECTED]): > What I'd like to do is to get information from the logs of the last > seven days. The way I try to do that is as follows: > FROM -00-00-07 > TO -00-00-01 > LOGFILE /log/http/iobox.com/access.log-%Y-%M* > The problem is that Analog reads all the log

Re: [analog-help] Error in script or dumb newbie?

2002-03-25 Thread Jeremy Wadsack
Chris, This would appear to be an error in your shell script. As you didn't include the script I can't give you any suggestions on it but it appears you have a '[' where bash does not want it. -- Jeremy Wadsack Wadsack-Allen Digital Group Chris McQuade ([EMAIL PROTECTED]): > Hi all. I am

RE: [analog-help] Automating analog

2002-03-25 Thread SUSANA PUMAR PAVON
Thank you very much. -Mensaje original- De: Jeremy Wadsack [mailto:[EMAIL PROTECTED]] Enviado el: lunes, 25 de marzo de 2002 16:24 Para: [EMAIL PROTECTED] Asunto: Re: [analog-help] Automating analog SUSANA PUMAR PAVON ([EMAIL PROTECTED]): > What I'd like to do is to get information fr

Re: [analog-help] logformat

2002-03-25 Thread Jeremy Wadsack
j.bottoms ([EMAIL PROTECTED]): > I'm still havin trouble understanding logformats so here is a question > ascii27.net myl-c-24-159-181-226.chartertn.net - - [10/Mar/2002:14:52:09 -0500] "-" >408 - 0 - "-" "-" - - > the above is a line from my log file. By looking at it it should break down in

Re: [analog-help] File size floors?

2002-03-25 Thread Jeremy Wadsack
Szymon Nitka ([EMAIL PROTECTED]): > I can see in the file size report: > 0: ... >1b- 10b: ... > 11b- 100b: ... > 101b- 1kb: ... > 1kb- 10kb: ... > 10kb-100kb: ... > 100kb- 1Mb: ... > 1Mb- 10Mb: ... > 10Mb-100Mb: ... > Is it

[analog-help] Helper Applications: DNS Lookups: jdresolve

2002-03-25 Thread Duke Hillard
At "http://www.analog.cx/helpers/index.html#dns"; (Analog Helper Applications: DNS Lookups), it might be advisable to modify the link for jdresolve to "http://www.jdrowell.com/"; (the author appears to be renovating his site; the current link is a 404). For those looking for DNS resolution, you m

[analog-help] Automate Output log format

2002-03-25 Thread Susanne Ma
Running IIS5 and trying out Analog to generate logs for users viewing. How do I designate the CFG file to pull the logfile EX<2-digit_current_year<2-digit_current_month.log? It doesn't appear to like ex%y%M.log format. I would like to automate generating a new report for every month. Thank

[analog-help] Help Understanding Bug Found

2002-03-25 Thread jenkins . mw
I am trying to decode what was meant by this: It is easy for an attacker to insert arbitrary strings into any web server logfile. If these strings are then analysed by analog, they can appear in the report. By this means an attacker can introduce arbitrary Javascript code, for

Re: Re: [analog-help] Numerical Addresses for Domain Report

2002-03-25 Thread Aengus
"Kent and Brynne Dyer" <[EMAIL PROTECTED]> wrote: > >> You only need to specify the "non-standard" settings for each > >> site - the log file location, the Hostname, any custom settings. > >> (You may be better off using a single, shared DNS file - it will > >> save you looking up the same addres

Re: [analog-help] Help Understanding Bug Found

2002-03-25 Thread Jeremy Wadsack
[EMAIL PROTECTED] ([EMAIL PROTECTED]): > I am trying to decode what was meant by this: > It is easy for an attacker to insert arbitrary strings into any web > server logfile. If these strings are then analysed by analog, they can > appear in the report. By this means an attacker

Re: [analog-help] Automate Output log format

2002-03-25 Thread Jeremy Wadsack
Susanne Ma ([EMAIL PROTECTED]): > Running IIS5 and trying out Analog to generate logs for users viewing. > How do I designate the CFG file to pull the logfile > EX<2-digit_current_year<2-digit_current_month.log? It doesn't appear > to like ex%y%M.log format. I would like to automate generating

Re: [analog-help] Automate Output log format

2002-03-25 Thread Aengus
"Jeremy Wadsack" <[EMAIL PROTECTED]> wrote: > Susanne Ma ([EMAIL PROTECTED]): > > > Running IIS5 and trying out Analog to generate logs for users > > viewing. > > > How do I designate the CFG file to pull the logfile > > EX<2-digit_current_year<2-digit_current_month.log? It doesn't > > appear to

Re: [analog-help] Help Understanding Bug Found

2002-03-25 Thread jenkins . mw
Jeremy, Thanks for the link and the info. It is much clearer now. Michael Internet Mail Message Received from host: pop1.isite.net [64.209.164.9]

Re: [analog-help] Automate Output log format

2002-03-25 Thread marsha . glassner
Until about a week ago, this worked for me: LOGFILE //server_name/InfoCtrLogs/in%y%M??.log Then IIS was upgraded (but Analog was not). The logfiles are written to a different directory now and begin with "ex" instead of "in", but that doesn't seem like it should make any difference to Ana

Re: [analog-help] Numerical Addresses for Domain Report

2002-03-25 Thread Kent and Brynne Dyer
>Just specify the logfile on the commandline (for both Analog and QDNS). SET logfile=ex02%month%.log QDNS /L %logfile% /D C:\analog\DNS.DNS /Y 1.2.3.4 Analog -G +gd:\www\sites\site.cfg %logfile% >There are some examples of getting the date into an NT environment variable in the list archive: htt

[analog-help] BIND Log-File analysis

2002-03-25 Thread Phil White
As a very quick question, before I attempt to sort this out myself, has anyone attempted to analyze a BIND (v9) log file using analog? If so, can you let me know how it might be best achieved? (for reference: Log file output = Feb 02 22:50:10.892 client 195.25.255.1#53: query: microsoft.com IN