[Fwd: Re: Real Server log format supported rmaccess.log]

[Francis J. Lacoste]

-----Forwarded Message-----

From: Elsner <Frank.Elsner at rz.uni-osnabrueck.de>
To: Francis J. Lacoste <flacoste at logreport.org>
Subject: Re: Real Server log format supported rmaccess.log
Date: 29 Nov 2002 16:48:48 +0100

On 29 Nov 2002 at 10:34, Francis J. Lacoste wrote:

> On ven, 2002-11-29 at 09:42, Elsner wrote:
> > Hello,
> > 
> > does Lire support the Real Server logfile format?
> 
> Not at the moment. But Lire is designed as an extensible log analysis
> framework and it's not hard to add support for new log files with 
> different data model than http.  If you can script perl, you can 
> probably add the support yourself. Feel free to post on
> developers at logreport.org to get more help on that topic.
> 
> I've added that log format on our list of requested log formats. Another
> way to help speed up support of that log format  (besides coding it) is
> by contributing sample log files. All such contributed log files are 
> treat as confidential data and are only available to the LogReport 
> developers.
> 
> Lire also contains a lr_anonymize script which can be used to anomyze
> email addresses and IP addresses that can appear in log file.
> 
> Thanks for your interest in LogReport, kind Regards,
> 
> Francis J. Lacoste
> 
> -- 
> Francis J. Lacoste              . .           http://www.logreport.org
> /^LogReport$/               . .               flacoste at logreport.org
> 

Thank for your answer. As it might help, I send you some more
pieces of information:

rmaccess.log (excerpt: 3 lines, each line splitted in mail, original file
has long lines, each line is started by IP address):

217.229.123.95 - - [27/Nov/2002:22:49:01 +0100]  "GET 
ramgen/informatik/lv/ainf/2002/v20021126_events.rm?start=00:00:00.
0 HTTP/1.0" 200 
429 [Mozilla/4.0 (compatible;MSIE 5.5;Windows 98;Win 9x 4.90)] 
[UNKNOWN] 
[UNKNOWN] 232 0 0 0 0 9372

217.229.123.95 - - [27/Nov/2002:22:49:03 +0100]  "GET 
ramgen/informatik/lv/ainf/2002/v20021126_events.rm?start=00:00:00.
0 HTTP/1.0" 200 
429 [Win98_4.90_6.0.11.818_RealPlayer_R10DED_de_586] 
[00000000-0000-0000-
0000-000000000000] [UNKNOWN] 232 0 0 0 0 9373

217.229.123.95 - - [27/Nov/2002:22:50:16 +0100]  "GET 
informatik/lv/ainf/2002/v20021126_events.rm?start=00:00:00.0&cloakp
ort=8080,554,7
070 RTSP/1.0" 200 4154447 
[Win98_4.90_6.0.11.818_RealPlayer_R10DED_de_586] 
[67c221fc-e754-4c62-b4b5-e514642b0565] [Stat1:       988          0          
0          0          
0 64_kbps_Voice][Stat2:     64083      81465          0          0          0          
4          0          
0          0          0         55 64_kbps_Voice] 412924930 5005 73 0 0 
9374

Description:
http://service.real.com/help/library/guides/g270/htmfiles/report.htm?UK
=X#61386

Analog can analyze rmaccess.log with the following LOGFORMAT:

LOGFORMAT (%s %j %j [%d/%M/%Y:%h:%n:%j %j]  "%j %r %j" %c 
%b [%B] %j)
LOGFILE ..\rmaccess.log

I have done log analysis by means of Lariat Real Server Basic 
Reports, too, but this tool is rather clumsy (JRE-based) and not further 
supported.

Could you please forward this message as I am not quite
sure whom to contact.


Regards Frank Elsner--
Dipl.-Math. Frank Elsner
Universitaet Osnabrueck, Rechenzentrum
Frank.Elsner at rz.uni-osnabrueck.de



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.logreport.org/pipermail/development/attachments/20021208/00d160f2/attachment.bin