Hi, Yet another logfile using a different definition then analog thinks is being used. In running analog, analog says there are these types of lines in the logfile (NCSA-combined).
LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b "%f" "%B"\n) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b "%f" "%B"\n) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%r" %c %b "%f" "%B"\n) In the end it faults telling that all lines are corrupt. In studying the lines I saw that after status code and nr. bytes transferred there is another number listed (on each line a number like 50 60 110 220 770). Could not find the meaning of this number, therefore best to do is considering this number as %j - junk or does this number signifies something (perhaps the recorded milliseconds)? So the format having the following lines: LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r%wHTTP%j" %c %b %j "%f" "%B"\n) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%j%w%r" %c %b %j "%f" "%B"\n) LOGFORMAT (%S %j %u [%d/%M/%Y:%h:%n:%j] "%r" %c %b %j "%f" "%B"\n) In this case analog is running properly with the following lines: 216.239.46.106 - - [05/Oct/2002:13:29:49 +0200] "GET /swiftbox/webface/ HTTP/1.0" 200 903 60 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 216.239.46.222 - - [05/Oct/2002:14:11:21 +0200] "GET /luijten/cba/nl/informatie.htm HTTP/1.0" 200 9843 1320 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 216.239.46.113 - - [05/Oct/2002:14:24:33 +0200] "GET /swiftbox/about.html HTTP/1.0" 304 0 0 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 213.51.129.133 - - [05/Oct/2002:14:25:10 +0200] "GET /luijten/cba/nl/verslaving.htm HTTP/1.0" 200 13164 770 "http://www.google.nl/search?q=verslavingsproblematiek&ie=UTF-8&oe=UTF-8&hl=nl&btnG=Google+zoeken&lr=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; TUCOWS; .NET CLR 1.0.3705)" 216.239.46.121 - - [05/Oct/2002:15:16:11 +0200] "GET /swiftbox/swiftbox/sbmain.html HTTP/1.0" 304 0 0 "-" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" Greetings, Henk Schrik +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/analog-help@lists.isite.net/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------