InternetOfficer.com

hi

i set awstats 6.9 on my centos box, everything work fine.

but i find many recorde like this:

10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:00:58 +0800] “GET /comic/images/splogo/1244779732836.gif HTTP/1.1″ 200 1525 “-” “-”
10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:01:01 +0800] “GET /wapbbmf/images/gif-0086.gif HTTP/1.1″ 200 78 “-” “-”
10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:01:03 +0800] “GET /wapbbmf/images/home_05.gif HTTP/1.1″ 200 948 “-” “-”
10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:01:07 +0800] “GET /comic/images/titleImg/1244108920259.gif HTTP/1.1″ 200 450 “-” “-”
10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:01:10 +0800] “GET /comic/images/titleImg/1244108550585.gif HTTP/1.1″ 200 414 “-” “-”
10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:01:12 +0800] “GET /comic/images/titleImg/1244108772817.gif HTTP/1.1″ 200 445 “-” “-”
10.126.195.114, 218.207.218.135 – - [09/Jul/2009:00:01:16 +0800] “GET /comic/images/titleImg/1243826188535.gif HTTP/1.1″ 200 1502 “-” “-”

awstats only analyze fist ip,but this is not real ip i think, i need analyze last ip, any one help me?

apache log format:

LogFormat “%{X-Forwarded-For}i %l %u %t \\”%r\\” %>s %b \\”%{Referer}i\\” \\”%{User-Agent}i\\”" combined

TIA

ps: sorry my poor english:(

thank you reply

i already read this port and change awstats.pl but not work, any good idea?

elsif ( $f =~ /%host_proxy$/ )
{ # if host_proxy tag used, host tag must not be used
$pos_host = $i;
$i++;
push @fieldlib, 'host';
$PerlParsingFormat .= "(?:(?:(?:\\\\d+\\\\.\\\\d+\\\\.\\\\d+\\\\.\\\\d+),\\\\s)*(\\\\d+\\\\.\\\\d+\\\\.\\\\d+\\\\.\\\\d+))";
}

thank u, it works now