From owner-freebsd-isp  Mon Jul 28 06:57:31 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id GAA07391
          for isp-outgoing; Mon, 28 Jul 1997 06:57:31 -0700 (PDT)
Received: from wopr.inetu.net (wopr.inetu.net [207.18.13.3])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id GAA07384
          for <freebsd-isp@FreeBSD.ORG>; Mon, 28 Jul 1997 06:57:29 -0700 (PDT)
Received: from localhost (dev@localhost)
	by wopr.inetu.net (8.8.5/8.8.5) with SMTP id KAA11827;
	Mon, 28 Jul 1997 10:04:00 -0400 (EDT)
Date: Mon, 28 Jul 1997 10:04:00 -0400 (EDT)
From: Dev Chanchani <dev@wopr.inetu.net>
To: nik@iii.co.uk
cc: "Jeffrey J. Mountin" <sysop@mixcom.com>, Jim Shankland <jas@flyingfox.com>,
        freebsd-isp@FreeBSD.ORG
Subject: Re: analog and Apache?
In-Reply-To: <19970728094542.49091@iii.co.uk>
Message-ID: <Pine.BSF.3.95q.970728100354.11823A-100000@wopr.inetu.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

May I please get a copy?

Thanks,
Dev
On Mon, 28 Jul 1997 nik@iii.co.uk wrote:

> On Fri, Jul 25, 1997 at 10:17:56PM -0500, Jeffrey J. Mountin wrote:
> [Reverse IP mapping when analysing log files]
> > Uh, you may not want to do this.
> > 
> > I found that after 4 weeks of running IP logging and using the results from
> > 3 servers that 5 hours to run reports vs 5 minutes was just a bit too much.
> 
> I've got 10 lines of Perl (well, maybe a few more than 10 lines) kicking
> around here somewhere that 
> 
>     #!/bin/pseudo-code
> 
>     Read in saved cache of IP addresses
> 
>     While (read a line from STDIN)
>         Check it's in Common Log Format
> 
>         If (the host entry is an IP address)
>              Look up the IP address
> 
>         Open the file yyyy/mm/dd.log (based on the date/time of the entry)
> 
>         Write the line to this file
>     Wend
> 
>     Dump IP address cache to file
> 
> Although it's slightly more sophisticated than that. I've found this makes
> log management that much easier, and means you only do the IP address look
> up once.
> 
> Copies available on request. Or if I get enough requests, I'll put it up for
> FTP somewhere.
> 
> N
> -- 
> --+==[ Nik Clayton is Just Another Perl Hacker at Interactive Investor ]==+--
>                                Pithy quotes suck.
>