adding session id to entries in access log

2009-10-01 Thread Douglas Sims
We've just launched the first mod_perl site I've ever designed. It's all going very well so far but I'm sure there are some things worth improving. I wonder if anyone might have suggestions about this scenario: I want to add the session id to the access log entries. This example: http://perl.apa

Re: adding session id to entries in access log

2009-10-02 Thread Cosimo Streppone
Douglas wrote: I want to add the session id to the access log entries. We just added "%{session_id}C" as an additional field to our CustomLog directive, and that worked fine for us. http://httpd.apache.org/docs/2.0/mod/mod_log_config.html -- Cosimo

Re: adding session id to entries in access log

2009-10-11 Thread Randal L. Schwartz
> "Douglas" == Douglas Sims writes: Douglas> I've tried to follow the philosophy that Randal Schwartz described in Douglas> a recent thread here - a cookie is just a serial number for a Douglas> browser. By rotating the cookies often we're hoping to avoid Douglas> problems with stolen or lea

Re: adding session id to entries in access log

2009-10-12 Thread Douglas Sims
Thanks, Paul and Cosimo. That module is just what I was looking for. Logging the note instead of the cookie is probably better for what we're doing. On Fri, Oct 2, 2009 at 6:56 AM, Paul Silevitch wrote: > You can use apache's custom log ( > http://httpd.apache.org/docs/2.0/mod/mod_log_con

Re: adding session id to entries in access log

2009-10-12 Thread Douglas Sims
We're starting to get some data now and I'm seeing a few minor problems with the implementation of the idea. Here's one: if a request arrives with a cookie that is associated with a different IP address then we create a new session entry and send a new cookie. I'm noticing that some users have IP

Re: adding session id to entries in access log

2009-10-12 Thread Douglas Sims
Thanks! That's a good idea. Just as an example, here are several IPs that seemed to be the same client. The user agent, referer, etc. were all the same and the IPs resolve to the same top-level domain. 205.228.12.236 205.228.12.151 205.228.12.254 On Mon, Oct 12, 2009 at 5:52 PM, Paul Silevitc