User Post
4:30 pm March 24, 2008
cwei
Member
posts 4
I need help on Unknown OS and Unknown browsers. I have following line in my apache Config:
… LogFormat "%{X-Forwarded-For}i %h %l %u %t \\"%r\\" %>s %b \\"%{Host}i\\" \\"%{Referer}i\\" \\"%{User-agent}i\\"" combined …
After I review my report, I found I have 85% Unknown OS and Unknown browsers. After I click the Unknown link, I got lots of “http://emportaluat1.lenscrafters.com/wps/wcm/connect/ f56e8a80478eb7e48bbd9f54bf84c3d3/broker_affordability.jpg?MOD=AJPERES” under Unknown browsers (useragent field). I checked my log and I found that I do have the user agent filed.
10.80.57.17 10.80.0.24 – - [11/Mar/2008 :16:27:45 -0400] "GET /wps/themes/html/ EyeMed_Shared/images/btnSubmit.gif HTTP /1.1" 304 – "emportaluat1.lenscrafters. com" "http://emportaluat1.lenscrafters. com/wps/portal/emweb" "Mozilla/5.0 (Win dows; U; Windows NT 5.1; en-US; rv:1.8. 1.12) Gecko/20080201 Firefox/2.0.0.12"
10.80.57.17 10.80.0.24 – - [11/Mar/2008 :16:27:45 -0400] "GET /wps/wcm/connect/ 6164e900478eb80d8ce69c54bf84c3d3/Vision +Wellness+small.jpg?MOD=AJPERES HTTP/1. 1" 304 – "emportaluat1.lenscrafters.com " "http://emportaluat1.lenscrafters.com /wps/portal/emweb" "Mozilla/5.0 (Window s; U; Windows NT 5.1; en-US; rv:1.8.1.1 2) Gecko/20080201 Firefox/2.0.0.12"
Looks like that it has problem to parse through the line which has “?MOD=AJPERES”…
Appreciated for any help!
cwei
2:53 am March 25, 2008
Jean-Luc
Admin
posts 1035
Hi,
The problem could come from the LogFormat and LogSeparator definitions used in your AWStats config file. Can you copy them here ?
12:33 pm March 25, 2008
cwei
Member
posts 4
LogFormat=1
LogSeparator=" "
Thanks!
cwei
12:50 pm March 25, 2008
Jean-Luc
Admin
posts 1035
Try this:
LogFormat = "%other %host %other %logname %time1 %methodurl %code %bytesd %otherquot %refererquot %uaquot"
3:55 pm March 27, 2008
cwei
Member
posts 4
Thanks for your help!
Now I see the OS and Broswer by using your LogFormat but lost my unique visitor which is "X-Forwarded-For" in my old LogFormat.
(LogFormat “%{X-Forwarded-For}i %h %l %u %t \\”%r\\” %>s %b \\”%{Host}i\\” \\”%{Referer}i\\” \\”%{User-agent}i\\”" )
How to combine your LogFormat and my LogFormat so that I can see the unique visitor and OS/Broswer as well.
Do
I have to match the LogFormat that I defined in Apache config? It's my
understand that LogFormat defined within apache config will determine
the log format of log file, the LogFormat that defined within AWStats
config will control how to parse the log file. Is this right?
Thanks again!
cwei
4:14 pm March 27, 2008
Jean-Luc
Admin
posts 1035
This one should be better:
LogFormat = “%host %other %other %logname %time1 %methodurl %code %bytesd %otherquot %refererquot %uaquot”
Your descriptions of LogFormat in Apache config and in AWStats config are perfect.
7:34 am April 1, 2008
cwei
Member
posts 4
This one is much better!!! Thanks!
After implement it, I am able to see both unique visitors and OS/Browser.
It really helps me a lot!
Thanks again!
cwei
11:42 am January 29, 2011
kitor_
Wielu?, Poland
New Member
posts 1
I also have problem with Unknown OS and Unknown Browsers, but in my case clicking unknown link give me nothing.
LogFormat = “%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot”
example from access.log:
192.168.0.1 – kitor [29/Jan/2011:11:29:13 +0100] "GET /cgi-bin/awstats.pl?urlfilter=facebook&urlfilterex=&output=urldetail&config=kitor.dynalias.com&framename=mainright HTTP/1.1" 200 2331 "http://kitor.dynalias.com/cgi-bin/awstats.pl?framename=mainright&output=urldetail" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b11pre) Gecko/20110128 Firefox/4.0b11pre"