[prev in list] [next in list] [prev in thread] [next in thread] 

List:       analog-help
Subject:    Re: [analog-help] Bytes Transferred on Windows Media Server
From:       "Aengus" <analog () eircom ! net>
Date:       2006-05-31 20:48:09
Message-ID: 05da01c684f3$8752aea0$6500a8c0 () xppro
[Download RAW message or body]

On Wednesday, May 31, 2006 3:57 PM [EDT],
Sokolow, Daniel <DSokolow@nshs.edu> wrote:

>> All,
>>
>> I've spent the better part of the day trying different
>> configurations, and getting all kinds of weird outputs, and I'm
>> still not getting what I want, so I'm asking the smart people.
>>
>> I'm trying to get a sense of the amount of GB/MB transferred from the
>> server, and near as I can tell, the logfiles are capturing that
>> information. Here's the log fields:
>>
>> #Fields: c-ip date time c-dns cs-uri-stem c-starttime x-duration
>> c-rate c-status c-playerid c-playerversion c-playerlanguage
>> cs(User-Agent) cs(Referer) c-hostexe c-hostexever c-os c-osversion
>> c-cpu filelength filesize avgbandwidth protocol transport audiocodec
>> videocodec channelURL sc-bytes c-bytes s-pkts-sent c-pkts-received
>> c-pkts-lost-client c-pkts-lost-net c-pkts-lost-cont-net c-resendreqs
>> c-pkts-recovered-ECC c-pkts-recovered-resent c-buffercount
>> c-totalbuffertime c-quality s-ip s-dns s-totalclients s-cpu-util
>> cs-user-name s-session-id s-content-path cs-url cs-media-name
>> c-max-bandwidth cs-media-role s-proxied
>>
>> and a sample line from a log:
>>
>> IP REDACTED 2006-05-31 00:04:17 - /video/lia.wmv 0 33 3 200
>> {3300AD50-2C39-46c0-AE0A-F5FC453811FC} 9.0.0.2980 en-US
>> Mozilla/4.0_(compatible;_MSIE_5.5;_Windows_NT_5.0)_(WMFSDK/9.0.0.2980)_WMPla
>> yer/9.0.0.3344(WMPDXM) URL REDACTED iexplore.exe 5.51.4807.2300
>> Windows_2000
>> 5.0.0.2195 Pentium 240 26670830 3373336 rtsp TCP - - - 14147354
>> 14147354 1765 1765 0 0 0 0 0 0 1 2 100 IP REDACTED 1 28 - 900
>> file://D:\Data\video\lia.wmv <file://D:\Data\video\lia.wmv>  URL
>> REDACTED lia.wmv - - 0
>>
>> Near as I can tell, the 14147354 is the result of the sc-bytes and
>> c-bytes fields.
>>
>> But when I add "%b" to the LOGFORMAT line, I don't get any bytes
>> returned, and the rest of the output is screwed up.  Here's the
>> LOGFORMAT line that works:
>>
>> LOGFORMAT (%s %Y-%m-%d %h:%n:%j %S %r %j %j %j %j %j %j %j %B %f %j)
>> LOGFORMAT (#%j)
>>
>> Does the %b need to go in a specific spot on the line to return that
>> information?

By my count, there are 13 fields between the referrer and sc-bytes, so you 
need something like:
LOGFORMAT (%S %Y-%m-%d %h:%n:%j %j %r %j %j %j %c %j %j %j %B %f %j %j %j %j 
%j %j %j %j %j %j %j %j %j %b %j)

>> I've tried it at the end, after the %B, in a few other
>> places, to no luck.  Or am I mistaken, and the logfiles are not
>> actually capturing that data and I need to add that on to the
>> server's logs?

Add on? You might consider turning off some of the fields that you aren't 
using, and don't actually care about.

>> One other question - is there a way to SORTBY numerically?  I'd like
>> to sort the Domain report by IP address.

HOSTSORTBY ALPHABETICAL will sort numeric IPs numerically in the Host Report 
(99 before 100, etc), but the Domain report will treat domain names, 
including unresolved IP addresses, as strings, so you get a "pure" 
alphabetical sort, with 100 before 99.


+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
[prev in list] [next in list] [prev in thread] [next in thread]