--- "Bradford L. Barrett" <brad@...> wrote:
>
> AllURLs  yes

This creates a complete list that you can use, but you
may need to create a "nice looking" list, so that
other people (clientes or supervisors), may easily
find the info they are looking for. You sometimes need
to chew the information for them, so you could grep
the file the list is in and create a nice report.

If you give them that list and tell them to search for
the URL by hand, they will probably never do it,
because there is so much info in it that they will
feel overhelmed.

>
> --
>
> On Wed, 19 May 2004, Tim Chetelat wrote:
>
> > Hey everyone.  First question here...  I inherited
> an existing site /
> > webalizer install.  The only thing I need to do
> right now is have it report
> > on 1 or 2 pages in addition to the Top 20 that
> show up now.  What do I need
> > to do, to have it report stats on individual
> pages?  Any help would be
> > greatly appreciated, thank you!
> >
> > Tim Chetelat
> > tim@...
> > http://www.twisted-reality.com/
> >
> >
> >
> >
> >
> > Webalizer homepage: http://www.webalizer.org
> > Webalizer for NT:
> http://www.medasys-lille.com/webalizer/
> >
> >
> > ttp://www.webalizer.org
> > Webalizer for NT:
> http://www.medasys-lille.com/webalizer/
> >
> >
> >
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> --
> Bradford L. Barrett
> brad@...
> A free electron in a sea of neutrons     DoD#1750
> KD4NAW
>
> The only thing Micro$oft has done for society, is
> make people
> believe that computers are inherently unreliable.
>


=====
Enric Naval
Estudiante de Informática de Gestión en la Udl (Lleida)
GRIHO enhanced webalizer.conf
http://griho.udl.es/webalizer/webalizer.conf.txt




__________________________________
Do you Yahoo!?
SBC Yahoo! - Internet access at a great low price.
http://promo.yahoo.com/sbc/

Tim Chetelat wrote:

>Hey everyone.  First question here...  I inherited an existing site /
>webalizer install.  The only thing I need to do right now is have it report
>on 1 or 2 pages in addition to the Top 20 that show up now.  What do I need
>to do, to have it report stats on individual pages?  Any help would be
>greatly appreciated, thank you!
>
>Tim Chetelat
>tim@...
>http://www.twisted-reality.com/
>
>
Hello,

For this you can try the enhanced webalizer from Luc L. Suryo.
It does just what you want.

Drop him a note, he'll tell you where you can download it:
Luc I. Suryo <luc@...>

Cheers,

Fabien Chevalier

>Hello,
>
>For this you can try the enhanced webalizer from Luc L. Suryo.
>It does just what you want.
>
>Drop him a note, he'll tell you where you can download it:
>Luc I. Suryo <luc@...>
>
>Cheers,
>
>Fabien Chevalier
>
>
>
Replying to myself,
It looks like i understood your question the wrong way. :-(
Just follow what Enric told you, he's hopefully right :-)

Fabien

Thank you all for the quick replies.  I will initially try Bradford's
suggestion, and show them the wonders of CTRL-F.  Only issue now is I (at
this point) only have ftp access, not shell.  Is there any other way to
restart Webalizer without shell access?

Tim Chetelat
tim@...
http://www.twisted-reality.com/


________________________________________
From: Fabien Chevalier [mailto:fabien@...]

Hello,

For this you can try the enhanced webalizer from Luc L. Suryo.
It does just what you want.

Drop him a note, he'll tell you where you can download it:
Luc I. Suryo <luc@...>

Cheers,

Fabien Chevalier


Webalizer homepage: http://www.webalizer.org
Webalizer for NT: http://www.medasys-lille.com/webalizer/


ttp://www.webalizer.org
Webalizer for NT: http://www.medasys-lille.com/webalizer/

> Thank you all for the quick replies.  I will initially try Bradford's
> suggestion, and show them the wonders of CTRL-F.  Only issue now is I (at
> this point) only have ftp access, not shell.  Is there any other way to
> restart Webalizer without shell access?

The program does not run continuously, so there really isn't anything
to 'restart'.  If you want to flush the results and start fresh from this
point on, then just remove the files in the output directory and wait
until the next time the program runs.

--
Bradford L. Barrett                      brad@...
A free electron in a sea of neutrons     DoD#1750 KD4NAW

The only thing Micro$oft has done for society, is make people
believe that computers are inherently unreliable.

Hello,

I am having problems with webalizer's visit counter. When I parse logfile for
single virtual host for single day, with visit timeout of 3h, it says there
were 281 visits from one particular IP (our company's external IP address).
That is wrong because if there are three hours between each visit then there
are maximum of 8 visits from single IP per day - or am I missing something?

Thank you and best regards,
Bostjan Skufca



PS: command line here:

webalizer -c ./webalizer.template.new.simpatije -o
/home/domenc10/html/www.simpatije.com/statistika6 -n www.simpatije.com -r
www.simpatije.com
/var/log/old_logs/apache/2.days.ago/www.simpatije.com.access.log



PS2: webalizer.conf here:

--------------------------------------------------------------------------------\
-
# use command:
# webalizer -c /etc/webalizer.conf -o
/home/username/html/www.domain.com/statistika/ \
# -n www.domain.com -r www.domain.com
/var/log/apache/www.domain.com.access.log
#
#

### These are moved to command line:
#LogFile
/var/log/old_logs/apache/2.days.ago/www.simpatije.com.access.log
#OutputDir      /home/domenc10/html/www.simpatije.com/statistika6
#HostName        www.simpatije.com
#HideReferrer   www.simpatije.com



### Common configuration starts here



LogType         web
HistoryName     webalizer.hist
ReportTitle     Statistika obiskov za

UseHTTPS        no
Quiet           no
ReallyQuiet     no
Debug           no
TimeMe          yes
GMTTime         no
# pazi tole spodej - lohk podrkas celo statistiko
IgnoreHist      no
FoldSeqErr      no

CountryGraph    yes
DailyGraph      yes
DailyStats      yes
HourlyGraph     yes
HourlyStats     yes

PageType        htm
PageType        html
PageType        shtml
PageType        php
PageType        php3
PageType        php4
PageType        phps
PageType        sphp
PageType        cgi
PageType        pl

GraphLegend     yes
GraphLines      4

#VisitTimeout   28800
VisitTimeout    800
#IndexAlias     # not used
MangleAgents    3

SearchEngine    yahoo.com                       p=
SearchEngine    altavista.com                   q=
SearchEngine    google.com                      q=
SearchEngine    eureka.com                      q=
SearchEngine    lycos.com                       query=
SearchEngine    hotbot.com                      MT=
SearchEngine    msn.com                         MT=
SearchEngine    infoseek.com                    qt=
SearchEngine    webcrawler                      searchText=
SearchEngine    excite                          search=
SearchEngine    netscape.com                    search=
SearchEngine    mamma.com                       query=
SearchEngine    alltheweb.com                   query=
SearchEngine    northernlight.com               qr=
SearchEngine    eon.si/portal/iskanje.asp       KljucneBesede=
SearchEngine    matkurja.com/bin/search         keys=
SearchEngine    matkurja.com/slo/search         keys=
SearchEngine    najdi.si                        q=
SearchEngine    raziskovalec.com                query=

Incremental     yes
IncrementalName webalizer.current

#DNSCache       # not used
#DNSChildren    0 # not used

TopAgents       50
AllAgents       yes
TopReferrers    50
AllReferrers    yes
TopSites        50
TopKSites       50
AllSites        yes
TopURLs         50
TopKURLs        50
TopCountries    300
TopEntry        50
TopExit         50
TopSearch       50
AllSearchStr    yes
TopUsers        50
AllUsers        yes

#HideAgent
#HideReferrer   Direct Request
#HideSite       localhost
HideAllSites    no
HideURL         *.gif
HideURL         *.GIF
HideURL         *.jpg
HideURL         *.JPG
HideURL         *.png
HideURL         *.PNG
HideURL         *.css
#HideUser

#IgnoreAgent
#IgnoreRefeffer
#IgnoreSite
#IgnoreUrl
#IgnoreUser

#GroupAgent
GroupReferrer   yahoo.com/              Yahoo!
GroupReferrer   excite.com/             Excite
GroupReferrer   infoseek.com/           InfoSeek
GroupReferrer   webcrawler.com/         WebCrawler
GroupReferrer   altavista.com/          Altavista
GroupReferrer   google.com/             Google
GroupReferrer   matkurja.com/           Matkurja
GroupReferrer   eon.si/                 Eon
GroupReferrer   najdi.si/               Najdi.Si
GroupReferrer   slowwwenia.com/         Slowwwenia
GroupReferrer   oloplan.com/            Oloplan
GroupReferrer   lycos.com/              Lycos
GroupReferrer   go.com/                 Go
GroupReferrer   alltheweb.com/          AllTheWeb
GroupReferrer   raziskovalec.com/       Raziskovalec.com
#GroupSite
#GroupDomains   2 # enabled at us
#GroupURL
#GroupUser

#IncludeSite
#IncludeUrl
#IncludeReferrer
#IncludeAgent
#IncludeUser

HTMLExtension   php
HTMLPre         <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
HTMLHead        <META NAME="author" CONTENT="The Webalizer">
#HTMLBody
#HTMLPost
HTMLTail        <A HREF="http://domenca.com"><IMG
SRC="http://graphics.domenca.com/ad/s.gif"></A>
#HTMLEnd

#DumpPath
#DumpExtension
#DumpHeader
#DumpSites
#DumpUrls
#DumpReferrers
#DumpAgents
#DumpUsers
#DumpSearchStr

GeoIP           yes
GeoIPDatabase   /usr/local/share/GeoIP/GeoIP.dat
--------------------------------------------------------------------------------\
-

usually tha is caused by a firewall reporesenting a group of users accessing the internet using a single IP .

----- Original Message -----
From: "Bostjan Skufca (at) domenca.com"
Date: Mon, 24 May 2004 09:45:37 +0200
To: webalizer@yahoogroups.com
Subject: [webalizer] Too many visits from single site/IP

Hello,

I am having problems with webalizer's visit counter. When I parse logfile for
single virtual host for single day, with visit timeout of 3h, it says there
were 281 visits from one particular IP (our company's external IP address).
That is wrong because if there are three hours between each visit then there
are maximum of 8 visits from single IP per day - or am I missing something?

Thank you and best regards,
Bostjan Skufca



PS: command line here:

webalizer -c ./webalizer.template.new.simpatije -o
/home/domenc10/html/www.simpatije.com/statistika6 -n www.simpatije.com -r
www.simpatije.com
/var/log/old_logs/apache/2.days.ago/www.simpatije.com.access.log



PS2: webalizer.conf here:

---------------------------------------------------------------------------------
# use command:
# webalizer -c /etc/webalizer.conf -o
/home/username/html/www.domain.com/statistika/ \
# -n www.domain.com -r www.domain.com
/var/log/apache/www.domain.com.access.log
#
#

### These are moved to command line:
#LogFile               
/var/log/old_logs/apache/2.days.ago/www.simpatije.com.access.log
#OutputDir      /home/domenc10/html/www.simpatije.com/statistika6
#HostName        www.simpatije.com
#HideReferrer   www.simpatije.com



### Common configuration starts here



LogType         web
HistoryName     webalizer.hist
ReportTitle     Sta tistika obiskov za

UseHTTPS        no
Quiet           no
ReallyQuiet     no
Debug           no
TimeMe          yes
GMTTime         no
# pazi tole spodej - lohk podrkas celo statistiko
IgnoreHist      no
FoldSeqErr      no

CountryGraph    yes
DailyGraph      yes
DailyStats      yes
HourlyGraph     yes
HourlyStats     yes

PageType        htm
PageType        html
PageType        shtml
PageType         php
PageType        php3
PageType        php4
PageType        phps
PageType        sphp
PageType        cgi
PageType        pl

GraphLegend     yes
GraphLines      4

#VisitTimeout   28800
VisitTimeout    800
#IndexAlias     # not used
MangleAgents    3

SearchEngine    yahoo.com                       p=
SearchEngine    altavista.com                   q=
SearchEngine &n bsp;  google.com                      q=
SearchEngine    eureka.com                      q=
SearchEngine    lycos.com                       query=
SearchEngine    hotbot.com                      MT=
SearchEngine    msn.com                         MT=
SearchEngine    infoseek.com           &nbs p;        qt=
SearchEngine    webcrawler                      searchText=
SearchEngine    excite                          search=
SearchEngine    netscape.com                    search=
SearchEngine    mamma.com                       query=
SearchEngine    alltheweb.com                   query=
SearchEngine    northernl ight.com               qr=
SearchEngine    eon.si/portal/iskanje.asp       KljucneBesede=
SearchEngine    matkurja.com/bin/search         keys=
SearchEngine    matkurja.com/slo/search         keys=
SearchEngine    najdi.si                        q=
SearchEngine    raziskovalec.com                query=

Incremental     yes
IncrementalName webalizer.current

#DNSCache       # not used
#DNSChildren    0 # not used

TopAgents  &n bsp;    50
AllAgents       yes
TopReferrers    50
AllReferrers    yes
TopSites        50
TopKSites       50
AllSites        yes
TopURLs         50
TopKURLs        50
TopCountries    300
TopEntry        50
TopExit         50
TopSearch       50
AllSearchStr    yes
TopUsers        50
AllUsers        yes

#HideAgent
#HideReferrer   Direct Request
#HideSite       localhost
HideAllSites    no
HideURL    nbsp;     *.gif
HideURL         *.GIF
HideURL         *.jpg
HideURL         *.JPG
HideURL         *.png
HideURL         *.PNG
HideURL         *.css
#HideUser

#IgnoreAgent
#IgnoreRefeffer
#IgnoreSite
#IgnoreUrl
#IgnoreUser

#GroupAgent
GroupReferrer   yahoo.com/              Yahoo!
GroupReferrer   excite.com/             Excite
GroupReferrer   infoseek.com/           InfoSeek
GroupReferrer   webcrawler.com/         ; WebCrawler
GroupReferrer   altavista.com/          Altavista
GroupReferrer   google.com/             Google
GroupReferrer   matkurja.com/           Matkurja
GroupReferrer   eon.si/                 Eon
GroupReferrer   najdi.si/               Najdi.Si
GroupReferrer   slowwwenia.com/         Slowwwenia
GroupReferrer   oloplan.com/            Oloplan
GroupReferrer   lycos.com/              Lycos
GroupReferrer  nbsp; go.com/                 Go
GroupReferrer   alltheweb.com/          AllTheWeb
GroupReferrer   raziskovalec.com/       Raziskovalec.com
#GroupSite
#GroupDomains   2 # enabled at us
#GroupURL
#GroupUser

#IncludeSite
#IncludeUrl
#IncludeReferrer
#IncludeAgent
#IncludeUser

HTMLExtension   php
HTMLPre         <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
HTMLHead        <META NAME="author" CONTENT="The Webalizer">
#HTMLBody
#HTMLPost
HTMLTail        <A HREF="http://domenca.com"><IMG
SRC="http://gr aphics.domenca.com/ad/s.gif"></A>
#HTMLEnd

#DumpPath
#DumpExtension
#DumpHeader
#DumpSites
#DumpUrls
#DumpReferrers
#DumpAgents
#DumpUsers
#DumpSearchStr

GeoIP           yes
GeoIPDatabase   /usr/local/share/GeoIP/GeoIP.dat
---------------------------------------------------------------------------------




Webalizer homepage: http://www.webalizer.org
Webalizer for NT: http://www.medasys-lille.com/webalizer/


ttp://www.webalizer.org
Webalizer for NT: http://www.medasys-lille.com/webalizer/

__________________________________________________________
Sign-up for Ads Free at Mail.com
http://www.mail.com/?sr=signup

true

but webalizer should count that ip as source of single visitor - or not?

Or stated otherwise:
does webalizer separate visitors only by IP or also by some other key (like
IP+Agent)?

regards,
Bostjan



On Monday 24 of May 2004 16:00, sam harris wrote:
> <html><body>
>
>
> <P>usually tha is caused by a firewall reporesenting a group of users
> accessing the internet using a single IP .</P> <P> </P>
> <P><BR><BR>----- Original Message -----<BR>From: "Bostjan Skufca (at)
> domenca.com" <BOSTJAN.SKUFCA@...><BR>Date: Mon, 24 May 2004
> 09:45:37 +0200<BR>To: webalizer@yahoogroups.com<BR>Subject: [webalizer] Too
> many visits from single site/IP<BR><BR><TT>Hello,<BR><BR>I am having
> problems with webalizer's visit counter. When I parse logfile for
> <BR>single virtual host for single day, with visit timeout of 3h, it says
> there <BR>were 281 visits from one particular IP (our company's external IP
> address). <BR>That is wrong because if there are three hours between each
> visit then there <BR>are maximum of 8 visits from single IP per day - or am
> I missing something?<BR><BR>Thank you and best regards,<BR>Bostjan
> Skufca<BR><BR><BR><BR>PS: command line here:<BR><BR>webalizer -c
> ./webalizer.template.new.simpatije -o
> <BR>/home/domenc10/html/www.simpatije.com/statistika6 -n www.simpatije.com
> -r <BR>www.simpatije.com
> <BR>/var/log/old_logs/apache/2.days.ago/www.simpatije.com.access.log<BR
>
>  ><BR><BR><BR>PS2: webalizer.conf
>  > here:<BR><BR>-----------------------------------------------------------
>  >----------------------<BR># use command:<BR># webalizer -c
>  > /etc/webalizer.conf -o
>  > <BR>/home/username/html/www.domain.com/statistika/ \<BR># -n
>  > www.domain.com -r www.domain.com
>  > <BR>/var/log/apache/www.domain.com.access.log<BR>#<BR>#<BR><BR>### These
>  > are moved to command
>  > line:<BR>#LogFile         &
>  >nbsp;     
>  > <BR>/var/log/old_logs/apache/2.days.ago/www.simpatije.com.access.log<BR>
>  >#OutputDir     
>  > /home/domenc10/html/www.simpatije.com/statistika6<BR>#HostName &nbs
>  >p;     
>  > www.simpatije.com<BR>#HideReferrer  
>  > www.simpatije.com<BR><BR><BR><BR>### Common configuration starts
>  > here<BR><BR><BR><BR>LogType       &nb
>  >sp; web<BR>HistoryName    
>  > webalizer.hist<BR>ReportTitle     Sta
>
>  tistika obiskov
> za<BR><BR>UseHTTPS       
> no<BR>Quiet          
> no<BR>ReallyQuiet    
> no<BR>Debug          
> no<BR>TimeMe         
> yes<BR>GMTTime         no<BR># pazi
> tole spodej - lohk podrkas celo
> statistiko<BR>IgnoreHist     
> no<BR>FoldSeqErr     
> no<BR><BR>CountryGraph   
> yes<BR>DailyGraph     
> yes<BR>DailyStats     
> yes<BR>HourlyGraph    
> yes<BR>HourlyStats    
> yes<BR><BR>PageType       
> htm<BR>PageType       
> html<BR>PageType       
> shtml<BR>PageType        
> php<BR>PageType       
> php3<BR>PageType       
> php4<BR>PageType       
> phps<BR>PageType       
> sphp<BR>PageType       
> cgi<BR>PageType       
> pl<BR><BR>GraphLegend    
> yes<BR>GraphLines     
> 4<BR><BR>#VisitTimeout   28800<BR>VisitTimeout   
> 800<BR>#IndexAlias     # not
> used<BR>MangleAgents   
> 3<BR><BR>SearchEngine   
> yahoo.com           
>           
> p=<BR>SearchEngine   
> altavista.com          &n
>bsp;        q=<BR>SearchEngine &n
> bsp; 
> google.com           
>;          
> q=<BR>SearchEngine   
> eureka.com           
>;          
> q=<BR>SearchEngine   
> lycos.com           
>           
> query=<BR>SearchEngine   
> hotbot.com           
>;          
> MT=<BR>SearchEngine   
> msn.com           &n
>bsp;            
> MT=<BR>SearchEngine   
> infoseek.com          &nb
>sp;&nbs p;       
> qt=<BR>SearchEngine   
> webcrawler           
>;          
> searchText=<BR>SearchEngine   
> excite           &nb
>sp;            &
>nbsp; search=<BR>SearchEngine   
> netscape.com          &nb
>sp;        
> search=<BR>SearchEngine   
> mamma.com           
>           
> query=<BR>SearchEngine   
> alltheweb.com          &n
>bsp;       
> query=<BR>SearchEngine    northernl
> ight.com           &
>nbsp;   qr=<BR>SearchEngine   
> eon.si/portal/iskanje.asp      
> KljucneBesede=<BR>SearchEngine   
> matkurja.com/bin/search        
> keys=<BR>SearchEngine   
> matkurja.com/slo/search        
> keys=<BR>SearchEngine   
> najdi.si           &
>nbsp;           
> q=<BR>SearchEngine   
> raziskovalec.com          
>;     
> query=<BR><BR>Incremental     yes<BR>IncrementalName
> webalizer.current<BR><BR>#DNSCache       #
> not used<BR>#DNSChildren    0 # not
> used<BR><BR>TopAgents  &n bsp;   
> 50<BR>AllAgents      
> yes<BR>TopReferrers    50<BR>AllReferrers   
> yes<BR>TopSites       
> 50<BR>TopKSites      
> 50<BR>AllSites       
> yes<BR>TopURLs        
> 50<BR>TopKURLs       
> 50<BR>TopCountries   
> 300<BR>TopEntry       
> 50<BR>TopExit        
> 50<BR>TopSearch      
> 50<BR>AllSearchStr   
> yes<BR>TopUsers       
> 50<BR>AllUsers       
> yes<BR><BR>#HideAgent<BR>#HideReferrer   Direct
> Request<BR>#HideSite      
> localhost<BR>HideAllSites   
> no<BR>HideURL   & nbsp;    
> *.gif<BR>HideURL        
> *.GIF<BR>HideURL        
> *.jpg<BR>HideURL        
> *.JPG<BR>HideURL        
> *.png<BR>HideURL        
> *.PNG<BR>HideURL        
> *.css<BR>#HideUser<BR><BR>#IgnoreAgent<BR>#IgnoreRefeffer<BR>#IgnoreSite<BR
>>#IgnoreUrl<BR>#IgnoreUser<BR><BR>#GroupAgent<BR>GroupReferrer  
> yahoo.com/           
>;   Yahoo!<BR>GroupReferrer  
> excite.com/          &nbs
>p;  Excite<BR>GroupReferrer  
> infoseek.com/          
> InfoSeek<BR>GroupReferrer  
> webcrawler.com/         ;
> WebCrawler<BR>GroupReferrer  
> altavista.com/         
> Altavista<BR>GroupReferrer  
> google.com/          &nbs
>p;  Google<BR>GroupReferrer  
> matkurja.com/          
> Matkurja<BR>GroupReferrer  
> eon.si/           &n
>bsp;     Eon<BR>GroupReferrer  
> najdi.si/           
>    Najdi.Si<BR>GroupReferrer  
> slowwwenia.com/        
> Slowwwenia<BR>GroupReferrer  
> oloplan.com/          &nb
>sp; Oloplan<BR>GroupReferrer  
> lycos.com/           
>;   Lycos<BR>GroupReferrer & nbsp;
> go.com/           &n
>bsp;     Go<BR>GroupReferrer  
> alltheweb.com/         
> AllTheWeb<BR>GroupReferrer  
> raziskovalec.com/      
> Raziskovalec.com<BR>#GroupSite<BR>#GroupDomains   2 # enabled at
> us<BR>#GroupURL<BR>#GroupUser<BR><BR>#IncludeSite<BR>#IncludeUrl<BR>#Includ
>eReferrer<BR>#IncludeAgent<BR>#IncludeUser<BR><BR>HTMLExtension  
> php<BR>HTMLPre         <!DOCTYPE
> HTML PUBLIC "-//W3C//DTD HTML 4.0
> Transitional//EN"><BR>HTMLHead       
> <META NAME="author" CONTENT="The
> Webalizer"><BR>#HTMLBody<BR>#HTMLPost<BR>HTMLTail    
>;    <A HREF="<A
> href="http://domenca.com/">http://domenca.com</A>"><IMG <BR>SRC="<A
> href="http://graphics.domenca.com/ad/s.gif">http://gr
> aphics.domenca.com/ad/s.gif</A>"></A><BR>#HTMLEnd<BR><BR>#DumpPath
><BR>#DumpExtension<BR>#DumpHeader<BR>#DumpSites<BR>#DumpUrls<BR>#DumpReferre
>rs<BR>#DumpAgents<BR>#DumpUsers<BR>#DumpSearchStr<BR><BR>GeoIP  &n
>bsp;       
> yes<BR>GeoIPDatabase  
> /usr/local/share/GeoIP/GeoIP.dat<BR>---------------------------------------
>------------------------------------------<BR><BR><BR></TT><BR><BR><TT>Webal
>izer homepage: <A
> href="http://www.webalizer.org/">http://www.webalizer.org</A><BR>Webalizer
> for NT: <A
> href="http://www.medasys-lille.com/webalizer/">http://www.medasys-lille.com
>/webalizer/</A><BR><BR><BR>ttp://www.webalizer.org<BR>Webalizer for NT: <A
> href="http://www.medasys-lille.com/webalizer/">http://www.medasys-lille.com
>/webalizer/</A><BR><BR><BR></TT><BR><BR><BR></P><BR>

I very much valued this statistic when using other web stat programs.
Am I missing something, or isn't it available with webstat?

If so, is there a reasonable chance it soon will be or should I look
elsewhere?

HI folks,

i have a problem with the IgnoreSite - Parameter in my webalizer.conf.
I want to ignore all requests that came from our proxies IP adress. It's the IP
193.x.y.z

Therefore I use the parameter

IgnoreSite 193.x.y.z

But it's not working. All records within my logfile that came from this IP are
counted. If I try "HideSite 193.x.y.z" instead it's working. But I really want
to IGNORE the 193.x.y.z

Any idea why? Attached is my conf-File
thanks for alle replies!,

greetings, Olli


#########################################

LogFile        C:\Program Files\Apache Group\Apache\logs\ksbaccess_april04.log
OutputDir      D:\gelized\extra\de\de
HistoryName webalizer.ksb.hist
Incremental yes
IncrementalName webalizer.ksb.current

PageType htm*
PageType cgi

HTMLBody <BODY BGCOLOR="#FFFFFF">Statistik Deutschland / deutsch (DE/de)
HideURL  *.gif
HideURL  *.GIF
HideURL  *.jpg
HideURL  *.JPG
HideURL  *.png
HideURL  *.PNG
HideURL  *.ra

IgnoreSite 193.99.52.253

IgnoreURL *
IncludeURL /ksb/web/DE/de/*

SearchEngine yahoo.com p=
SearchEngine altavista.com q=
SearchEngine google.com q=
SearchEngine eureka.com q=
SearchEngine lycos.com query=
SearchEngine hotbot.com MT=
SearchEngine msn.com  MT=
SearchEngine infoseek.com qt=
SearchEngine webcrawler searchText=
SearchEngine excite  search=
SearchEngine netscape.com search=
SearchEngine mamma.com query=
SearchEngine alltheweb.com query=
SearchEngine northernlight.com  qr=






________________________________________________________________
Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193

Hello,
due to hacking trials from misc. IPs, my apache log files contain long
lines like
66.125.23*.** - - [09/Mar/2004:03:19:55 -0600] "search
/\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1.......

Webalizer complains for each line this:
"Error: Skipping oversized log record"

I know, that these are just warnings, but I want to ignore them -
without compiling new ( setting line length to 32000000 could be a
solution) , without setting ReallyQuiet=Yes .
Running a skript every logrotate (egrep with ignoring the "SEARCH"
lines) isnt very nice, IMHO.

I wonder, why this problem wasnt discussed here before.... the full
search doesnt help....
Any ideas ?

Andre

To avoid the "Error: Skipping oversized log record"
message, you can simply comment the line that actually
prints the message to the error output. Webalizer will
still detect the errors, but it will not report them.


diff webalizer-2.01-10/webalizer.c
modified/webalizer.c
541c541
<             fprintf(stderr,"%s",msg_big_rec);
---
>             #fprintf(stderr,"%s",msg_big_rec);




--- Andre Gellert <haqrz@...> wrote:
> Hello,
> due to hacking trials from misc. IPs, my apache log
> files contain long
> lines like
> 66.125.23*.** - - [09/Mar/2004:03:19:55 -0600]
> "search
>
/\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1.......
>
> Webalizer complains for each line this:
> "Error: Skipping oversized log record"
>
> I know, that these are just warnings, but I want to
> ignore them -
> without compiling new ( setting line length to
> 32000000 could be a
> solution), without setting ReallyQuiet=Yes .
> Running a skript every logrotate (egrep with
> ignoring the "SEARCH"
> lines) isnt very nice, IMHO.
>
> I wonder, why this problem wasnt discussed here
> before.... the full
> search doesnt help....
> Any ideas ?
>
> Andre
>
>
>
>


=====
Enric Naval
Estudiante de Informática de Gestión en la Udl (Lleida)
GRIHO enhanced webalizer.conf
http://griho.udl.es/webalizer/webalizer.conf.txt




__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/

Is that a warning or an error? it seems to be an error...and if is an error i
think that webalizer don´t count that record...when is a warning it trunc the
oversized record

are you using a clf or squid logformat?


you can avoid that message in parser.c , look for the field in the log record
that you are parsing ( squid or apache) and you can comment the line with these
message but you have to compile again the webalizer


----- Original Message -----
From: Enric Naval <enventa2000@...>
Date: Tue, 25 May 2004 11:48:19 -0700 (PDT)
To: webalizer@yahoogroups.com
Subject: Re: [webalizer] "Skipping oversized log record" due to hacking attempts

> To avoid the "Error: Skipping oversized log record"
> message, you can simply comment the line that actually
> prints the message to the error output. Webalizer will
> still detect the errors, but it will not report them.
>
>
> diff webalizer-2.01-10/webalizer.c
> modified/webalizer.c
> 541c541
> <             fprintf(stderr,"%s",msg_big_rec);
> ---
> >             #fprintf(stderr,"%s",msg_big_rec);
>
>
>
>
> --- Andre Gellert <haqrz@...> wrote:
> > Hello,
> > due to hacking trials from misc. IPs, my apache log
> > files contain long
> > lines like
> > 66.125.23*.** - - [09/Mar/2004:03:19:55 -0600]
> > "search
> >
> /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1.......
> >
> > Webalizer complains for each line this:
> > "Error: Skipping oversized log record"
> >
> > I know, that these are just warnings, but I want to
> > ignore them -
> > without compiling new ( setting line length to
> > 32000000 could be a
> > solution), without setting ReallyQuiet=Yes .
> > Running a skript every logrotate (egrep with
> > ignoring the "SEARCH"
> > lines) isnt very nice, IMHO.
> >
> > I wonder, why this problem wasnt discussed here
> > before.... the full
> > search doesnt help....
> > Any ideas ?
> >
> > Andre
> >
> >
> >
> >
>
>
> =====
> Enric Naval
> Estudiante de Informática de Gestión en la Udl (Lleida)
> GRIHO enhanced webalizer.conf
> http://griho.udl.es/webalizer/webalizer.conf.txt
>
>
>
>
> __________________________________
> Do you Yahoo!?
> Friends.  Fun.  Try the all-new Yahoo! Messenger.
> http://messenger.yahoo.com/
>
>
>
> Webalizer homepage: http://www.webalizer.org
> Webalizer for NT: http://www.medasys-lille.com/webalizer/
>
>
> ttp://www.webalizer.org
> Webalizer for NT: http://www.medasys-lille.com/webalizer/
>
>
>
> Yahoo! Groups Links
>
>
>
>
>

--
_____________________________________________________________
Web-based SMS services available at http://www.operamail.com.
From your mailbox to local or overseas cell phones.

Powered by Outblaze

Anyone know how to get Webalizer to extend how long it uses the DNS cache?
Right now, it seems like it does a re-lookup every 3 days on domains...that's
causing some major bog time on our server, is it possible to extend that?

Nathan

Hi

I am trying to analyze iis logs and i get the following errors messages
Webalizer V2.01-10 (CYGWIN_NT-5.0 1.3.10(0.51/3/2)) English
Using logfile D:\Logs\W3SVC1\in040526.log (clf)
Creating output in current directory
Hostname for reports is 'NTTSTCPOCC01'
History file not found...
Warning: Truncating oversized username
Skipping bad record (1)
Warning: Truncating oversized username
Skipping bad record (2)
Warning: Truncating oversized username
Skipping bad record (3)
Warning: Truncating oversized username
Skipping bad record (4)
Warning: Truncating oversized username
Skipping bad record (5)
Warning: Truncating oversized username
Skipping bad record (6)
Skipping bad record (7)
Skipping bad record (8)
Skipping bad record (9)
Skipping bad record (10)
Skipping bad record (11)
Skipping bad record (12)
Skipping bad record (13)
Skipping bad record (14)
Skipping bad record (15)
Skipping bad record (16)
Skipping bad record (17)
Skipping bad record (18)
Skipping bad record (19)
Skipping bad record (20)
Skipping bad record (21)
Skipping bad record (22)
No valid records found!

does anyone know what can be causing this

Mokwena Motseto
"This e-mail is sent in terms of the following policy/disclaimer. Click on this link http://www.sapo.co.za/mail_disclaimer.htm to read full disclaimer."

Ooops, you have to comment the line in parser.c or the
line in webalizer.c?

This line in webalizer.c will execute when the total
length of the record is too long. The record will be
skipped:

fprintf(stderr,"%s",msg_big_rec);

The error is: "Error: Skipping oversized log record"

This line in parser.c will execute when the request
field is too long, but ONLY if the total lenght of the
record is short enough to not be skipped in
webalizer.c . (Notice the line appears twice in the
file, once for the http log and another one for the
squid log).

fprintf(stderr,"%s",msg_big_req);

The error is: "Warning: Truncating oversized request
field"

In this case, the request field is so long that the
records always are longer than the allowed total
length in webalizer.c (the max total length is
MAXURL-1)

The second error only appears when the request is too
long for the request field, but not long enough to
cause the record to be skipped.

(You can find the error messages in the "lang"
subdirectory, in the file "webalizer_lang.english")


--- Vasco  Rolo  <vrolo@...> wrote:
>
> Is that a warning or an error? it seems to be an
> error...and if is an error i think that webalizer
> don´t count that record...when is a warning it trunc
> the oversized record
>
> are you using a clf or squid logformat?
>
>
> you can avoid that message in parser.c , look for
> the field in the log record that you are parsing (
> squid or apache) and you can comment the line with
> these message but you have to compile again the
> webalizer
>
>
> ----- Original Message -----
> From: Enric Naval <enventa2000@...>
> Date: Tue, 25 May 2004 11:48:19 -0700 (PDT)
> To: webalizer@yahoogroups.com
> Subject: Re: [webalizer] "Skipping oversized log
> record" due to hacking attempts
>
> > To avoid the "Error: Skipping oversized log
> record"
> > message, you can simply comment the line that
> actually
> > prints the message to the error output. Webalizer
> will
> > still detect the errors, but it will not report
> them.
> >
> >
> > diff webalizer-2.01-10/webalizer.c
> > modified/webalizer.c
> > 541c541
> > <             fprintf(stderr,"%s",msg_big_rec);
> > ---
> > >             #fprintf(stderr,"%s",msg_big_rec);
> >
> >
> >
> >
> > --- Andre Gellert <haqrz@...> wrote:
> > > Hello,
> > > due to hacking trials from misc. IPs, my apache
> log
> > > files contain long
> > > lines like
> > > 66.125.23*.** - - [09/Mar/2004:03:19:55 -0600]
> > > "search
> > >
> >
>
/\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1.......
> > >
> > > Webalizer complains for each line this:
> > > "Error: Skipping oversized log record"
> > >
> > > I know, that these are just warnings, but I want
> to
> > > ignore them -
> > > without compiling new ( setting line length to
> > > 32000000 could be a
> > > solution), without setting ReallyQuiet=Yes .
> > > Running a skript every logrotate (egrep with
> > > ignoring the "SEARCH"
> > > lines) isnt very nice, IMHO.
> > >
> > > I wonder, why this problem wasnt discussed here
> > > before.... the full
> > > search doesnt help....
> > > Any ideas ?
> > >
> > > Andre
> > >
> > >
> > >
> > >
> >
> >
> > =====
> > Enric Naval
> > Estudiante de Informática de Gestión en la Udl
> (Lleida)
> > GRIHO enhanced webalizer.conf
> > http://griho.udl.es/webalizer/webalizer.conf.txt
> >
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > Friends.  Fun.  Try the all-new Yahoo! Messenger.
> > http://messenger.yahoo.com/
> >
> >
> >
> > Webalizer homepage: http://www.webalizer.org
> > Webalizer for NT:
> http://www.medasys-lille.com/webalizer/
> >
> >
> > ttp://www.webalizer.org
> > Webalizer for NT:
> http://www.medasys-lille.com/webalizer/
> >
> >
> >
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
>
> --
>
_____________________________________________________________
> Web-based SMS services available at
> http://www.operamail.com.
> From your mailbox to local or overseas cell phones.
>
> Powered by Outblaze
>


=====
Enric Naval
Estudiante de Informática de Gestión en la Udl (Lleida)
GRIHO enhanced webalizer.conf
http://griho.udl.es/webalizer/webalizer.conf.txt

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

Your log file is not in clf format. You are surely
using some format from ISS, or perhaps your apache
format is incorrect. You could copy&paste a pair of
lines of your log file, so that people familiar with
windows formats can tell you what format you are
using.


--- Mokwena Motseto <motsetm@...> wrote:
> Hi
>
> I am trying to analyze iis logs and i get the
> following errors messages
> Webalizer V2.01-10 (CYGWIN_NT-5.0 1.3.10(0.51/3/2))
> English
> Using logfile D:\Logs\W3SVC1\in040526.log (clf)
> Creating output in current directory
> Hostname for reports is 'NTTSTCPOCC01'
> History file not found...
> Warning: Truncating oversized username
> Skipping bad record (1)
> Warning: Truncating oversized username
> Skipping bad record (2)
> Warning: Truncating oversized username
> Skipping bad record (3)
> Warning: Truncating oversized username
> Skipping bad record (4)
> Warning: Truncating oversized username
> Skipping bad record (5)
> Warning: Truncating oversized username
> Skipping bad record (6)
> Skipping bad record (7)
> Skipping bad record (8)
> Skipping bad record (9)
> Skipping bad record (10)
> Skipping bad record (11)
> Skipping bad record (12)
> Skipping bad record (13)
> Skipping bad record (14)
> Skipping bad record (15)
> Skipping bad record (16)
> Skipping bad record (17)
> Skipping bad record (18)
> Skipping bad record (19)
> Skipping bad record (20)
> Skipping bad record (21)
> Skipping bad record (22)
> No valid records found!
>
> does anyone know what can be causing this
>
> Mokwena Motseto
> "This e-mail is sent in terms of the following
> policy/disclaimer. Click on
> this link http://www.sapo.co.za/mail_disclaimer.htm
> to read full
> disclaimer."
>


=====
Enric Naval
Estudiante de Informática de Gestión en la Udl (Lleida)
GRIHO enhanced webalizer.conf
http://griho.udl.es/webalizer/webalizer.conf.txt




__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/

In the file "dns_resolv.h":

#define DNS_CACHE_TTL     86400*3     /* TTL of an
Entry in the DNS cache   */


86400 is the length in seconds of one day. So 86400*7
will make one week. I guess that you can safely extend
that to one month (*30) if you really have problems
with lookups. The recommendend longest time is one
week, though...

TTL means "Time To Live" and it is used also in
TCP/IP.


--- "Nathan E. Pralle" <tarsi@...> wrote:
> Anyone know how to get Webalizer to extend how long
> it uses the DNS cache?
> Right now, it seems like it does a re-lookup every 3
> days on domains...that's
> causing some major bog time on our server, is it
> possible to extend that?
>
> Nathan
>
>


=====
Enric Naval
Estudiante de Informática de Gestión en la Udl (Lleida)
GRIHO enhanced webalizer.conf
http://griho.udl.es/webalizer/webalizer.conf.txt




__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/

Hi

I just came accross this webalizer for win32 and it analyses my IIS logs, except for the errors below

From what i could gather is that it can also analyse sqiud logs but i am running microsoft ISA server, can webalizer webalizer analyse ISA logs as well, if yes please tell me how and why do i get the errors below

Webalizer V2.01-06-RB04 (Windows NT 5.0 Service Pack 4) English
Using DNS cache file dns_cache.db
Creating output in D:/Webstats/webalizer/wwwroot
Hostname for reports is 'open'
Reading history file... webalizer.hist
Using logfile D:/Webstats/webalizer/logs/W3SVC10/in0405.log (IIS-SDT (IIS4))
Skipping bad record (14)
Skipping bad record (15)
Skipping bad record (16)
Skipping bad record (17)
Skipping bad record (18)
Skipping bad record (19)
Skipping bad record (20)
Skipping bad record (21)
Skipping bad record (22)
Skipping bad record (23)
Skipping bad record (24)
Skipping bad record (25)
Skipping bad record (26)
Skipping bad record (27)
Skipping bad record (28)
Skipping bad record (29)
Generating report for April 2000
Generating summary report
Saving history information...
29 records (16 bad) in 20.00 seconds, 1/sec

Mokwena Motseto
"This e-mail is sent in terms of the following policy/disclaimer. Click on this link http://www.sapo.co.za/mail_disclaimer.htm to read full disclaimer."

"This e-mail is sent in terms of the following policy/disclaimer. Click on this link http://www.sapo.co.za/mail_disclaimer.htm to read full disclaimer."

I am on a mini-vacation for an extended Memorial Day Weekend. I will not be
online until Tuesday, June 1, 2004.

If you have a question or urgent issue during my absence, please contact Kate
Babkirk at kate@... or 415-901-0116.

Thank you and I'll talk with you soon!

~ Farra

Farra Trompeter
Senior Account Executive, Donordigital
182 Second Street, Suite 400
San Francisco CA 94105
phone: (415) 901-0118
fax: (415) 901-0112
farra@...

I am on a mini-vacation for an extended Memorial Day Weekend. I will not be
online until Tuesday, June 1, 2004.

If you have a question or urgent issue during my absence, please contact Kate
Babkirk at kate@... or 415-901-0116.

Thank you and I'll talk with you soon!

~ Farra

Farra Trompeter
Senior Account Executive, Donordigital
182 Second Street, Suite 400
San Francisco CA 94105
phone: (415) 901-0118
fax: (415) 901-0112
farra@...

hi all,

i would ask to the list how we can GroupDomain.

for groupind a domain (ex: www.xxx.pl) we have to put this domain on the
GroupSite tag only or we have a GroupDoman tag ( GroupDomain   www.xxx.pl     
alias)?

where will see these groups, at sites table or url table? will

i'm using a clf log format without dns cache, so i get the ip on table sites,
this influence the result of the GroupDomain


tks all


--
_____________________________________________________________
Web-based SMS services available at http://www.operamail.com.
From your mailbox to local or overseas cell phones.

Powered by Outblaze

I am on a mini-vacation for an extended Memorial Day Weekend. I will not be
online until Tuesday, June 1, 2004.

If you have a question or urgent issue during my absence, please contact Kate
Babkirk at kate@... or 415-901-0116.

Thank you and I'll talk with you soon!

~ Farra

Farra Trompeter
Senior Account Executive, Donordigital
182 Second Street, Suite 400
San Francisco CA 94105
phone: (415) 901-0118
fax: (415) 901-0112
farra@...

I am on a mini-vacation for an extended Memorial Day Weekend. I will not be
online until Tuesday, June 1, 2004.

If you have a question or urgent issue during my absence, please contact Kate
Babkirk at kate@... or 415-901-0116.

Thank you and I'll talk with you soon!

~ Farra

Farra Trompeter
Senior Account Executive, Donordigital
182 Second Street, Suite 400
San Francisco CA 94105
phone: (415) 901-0118
fax: (415) 901-0112
farra@...

Hello:


> for groupind a domain (ex: www.xxx.pl) we have to put this domain on
>the GroupSite tag only or we have a GroupDoman tag ( GroupDomain
>www.xxx.pl      alias)?


To group domains you only need the GrouoSite tag.


> i'm using a clf log format without dns cache, so i get the ip on
>table sites, this influence the result of the GroupDomain


The GroupSite keyword matches substrings in the visitor's site name:

Using this:

GroupSite .polo.com    Visitors from within the polo.com domain

You will match these sites in the log files:

210.15.32.12.reverse.polo.com
cache.polo.com
d.s3223.polo.com.webcache

If there only IPs, then the sites in the log files would be:

219.3.12.34
154.12.32.1
194.21.134.2

and they would most obviously not match at all.

If the domain names are not in the logs, and there is no DNS
resolving, then webalizer cannot know what domains correspond to what
IPs. It would need an enormous database relating IPs with domains.

You need to either activate the DNS cache or to resolve the IPs in the
archived logs using some tool like logresolve or others. You can
resolve the logs once, and leave them that way, so you don't need to
resolve them any more.

Bye.

--- Guy Merritt <guy@...> wrote:
> Is there a way to make Webalizer stop counting hits
> from a LAN Windows box - uncommenting the"Hide Site
> localhost", as far as I know, wouldn't be the answer
> (since that refers to the Linux box on which
> Webalizer is running).  I've got a handy deal called
> AXS administrator that has an "ignore list" where
> you can enter NAT numbers of boxes, domain names,
> etc.  Webalizer is cooler, actually, and I use it
> for 4 sites but the stats don't mean much because if
> I edit a page and then hit the page a dozen times
> from Windows I've got wildly skewed results.........
>
> Thanks guys..............
>
> Guy Merritt


Hello:

I used this to group the visits from our lan. You will
have to use IgnoreSite instead of GroupSite/HideSite.
Ask the network administrator about what IPs subnets
are being used in your lan and change the values here.
Add machine names appropiately. Beware that common
names like "jupiter", "juno", "cache" or "gateway" may
appear in legitimate visits, so be careful when adding
entries.


#We ignore visits from the local machine
IgnoreSite      griho.udl.es
IgnoreSite      localhost

# We group the 10.18., 10.200, and 10.30. subnets
GroupSite       10.18*        Internal Network
HideSite        10.18*
GroupSite       10.200*       Internal Network
HideSite        10.200*
GroupSite       10.30*        Internal Network
HideSite        10.30*

# We group all the other posible private networks
GroupSite       172.16*       Internal Network
HideSite        172.16*
GroupSite       192.168*      Internal Network
HideSite        192.168*

# This is the domain used to name
# the lan machines
GroupSite       *.udl.net     Internal Network
HideSite        *.udl.net



NOTE: I think you can ignore all the 10.x.x.x subnet
using "IgnoreSite  10.*" but I never actually tried to
do it. This was matching some legitimes entries. There
were several visitors with "10.x.x.x.domain.com"
names.  Probably some lan name forwarded by some
proxy.


NOTE: Currently I'm using grep to rip the lan entries
from the log files before procesing with webalizer. I
believe this is faster that using webalizer keywords.
You cn only do this in a script or in the command
line. Notice that here I am filtering all IPS starting
with "10." and followed by a number. The character "^"
means start of line. I'm enclosing the dots with
brackets "[.]" so grep will not interpret them as a
special character.

grep access_log -v -e ^localhost -e ^127 -e ^192[.]168
-e ^10[.][0-9] -e ^172[.]16[.] -e ^griho[.]udl[.]es -e
udl[.]net > access_log_greped

Goodbye.




=====
Enric Naval
Estudiante de Informática de Gestión en la Udl (Lleida)
GRIHO enhanced webalizer.conf
http://griho.udl.es/webalizer/webalizer.conf.txt




__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/

Hi

I am using webalizer to analyse my iis logs and its working like a dream, i want to create tab deliminated file, but i still do not get dump files

my conf file is as follows

#DumpPath       /var/lib/httpd/logs
DumpPath        D:/Webstats/webalizer/dump

DumpHeader      yes

DumpExtension   tab

DumpSites       yes
DumpURLs        yes
DumpReferrers   yes
DumpAgents      yes
DumpUsers       yes
DumpSearchStr   yes
 
And again this webalizer is so great have you mybe looked into using it to analyse ISA server logs, it can analyse squid files

Mokwena Motseto
"This e-mail is sent in terms of the following policy/disclaimer. Click on this link http://www.sapo.co.za/mail_disclaimer.htm to read full disclaimer."