Current User: Guest Login
Please consider registering

Lost Your Password?

Search Forums:


Minimum search word length is 4 characters – Maximum search word length is 84 characters
Wildcard Usage:
*  matches any number of characters    %  matches exactly one character

Interesting LogFile

Reply to Post Add a New Topic

10:06 am
September 8, 2007



Hi again

I have an interesting logfile to analyze. I have many web sites served under win 2003, iis6. These web sites are built under a specific management system and they are all listed under the same web site in IIS. So, they are all logged in one log file, seperated by host headers under cs(Referer) tags. Here are some lines from that file;

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-bytes time-taken

2007-05-13 00:00:05
xx GET /img/abc/logo.gif – - xxx. Mozilla/4.0+(compatib
) http: // 200
 501 93
2007-05-13 00:00:34
xx GET /img/xyz/logo.gif – - xxx. Mozilla/4.0+(compatib
) http: // 200
 3662 124

2007-05-13 00:00:52
xx GET /img/prs/logo.gif – - xxx. Mozilla/5.0+(Windows;
 http: //www.prs.ddd.eee.ff/ 200
1042 15


As you see, these sites are all in form of and i need to get seperated statistics for these sites. Is there a way to do this? I think this log file must be analyzed regarding the cs(Referer) tag but I don't know how to do this. Any ideas?

11:11 am
September 9, 2007



posts 1125

Hi Hydra,

The referrer field is not supposed to identify the web server. Visitors who type the address of the site in the address bar, visitors who hide the referrers, visitors who bookmarked the site, visitors who clicked a link on another web site, … will not show the referrer you expect.

You should add a field for the virtual host name in the log file. Then it will be easy. In IIS, it is called r-host or cs-host.


7:23 pm
September 11, 2007



If you need to parse an existing log file without that information, you could use the SkipFiles parameter and list all the sites you do not want (assuming /abc/ is a folder reflecting the site name). Repeat for each, changing the parameter to remove the other sites.

Reply to Post

Reply to Topic:
Interesting LogFile

Guest Name (Required):

Guest Email (Required):

NOTE: New Posts are subject to administrator approval before being displayed

Confused Cool Cry Embarassed Frown Kiss Laugh Smile Surprised Wink Yell
Post New Reply

Guest URL (required)

Math Required!
What is the sum of:
6 + 5

About the Forum

Forum Timezone: UTC 1

Most Users Ever Online: 302

Currently Online:
12 Guests

Currently Browsing this Topic:
1 Guest

Forum Stats:

Groups: 2
Forums: 9
Topics: 639
Posts: 2710


There are 257 Members
There have been 304 Guests

There is 1 Admin
There is 1 Moderator

Top Posters:

cssfsu – 55
deepakgupta – 34
albert_newton – 30
cosminpana – 20
DTNMike – 19
ahtshun83 – 17

Recent New Members: raju, todd2taylor, sbdcunha, mansigill1987, ThomasDuh, ThomasKic

Administrators: Jean-Luc (1125 Posts)

Moderators: Jean-Luc (1125 Posts)