Web log analyzer?? counts unique JSESSIONID as sessions ?

Greetings,

I've done a web / group search for weblog analyzer report tools and I'm
quite tired and sick of the whole search and demo process!! LOL!! OMG
there's alot of tools, some freeware and mostly commercial ware and
none do what I want.

Problem:

- Weblogic access.log, very similar to common log format and most
analyzers parse it just fine.

- The firewall masks all incoming IPs as just one IP the firewall. So
how to differentiate and count users? My thought from looking at the
access logs is to count the Gets that used URL re-writing and put the
JSESSION id as a get parameter.

How else?

No report tools offer this as a feature.

I'd like to count the number of unique JSESSION ids and the number of
gets per ID, per hour etc.

Any helps?

Thanks, curt

On 15 Jul 2005 13:00:59 -0700, chsmith@speakeasy.net <chsmith@speakeasy.net> wrote:
> I'd like to count the number of unique JSESSION ids and the number of
> gets per ID, per hour etc.

> Any helps?

you can do it yourself using tools such as 'awk' and 'uniq' and
'sort'.

it is not really difficult.

i

chsmith@speakeasy.net wrote:
> Greetings,
>
> I've done a web / group search for weblog analyzer report tools and I'm
> quite tired and sick of the whole search and demo process!! LOL!! OMG
> there's alot of tools, some freeware and mostly commercial ware and
> none do what I want.
>
> Problem:
>
> - Weblogic access.log, very similar to common log format and most
> analyzers parse it just fine.
>
> - The firewall masks all incoming IPs as just one IP the firewall. So
> how to differentiate and count users? My thought from looking at the
> access logs is to count the Gets that used URL re-writing and put the
> JSESSION id as a get parameter.
>
> How else?
>
> No report tools offer this as a feature.
>
> I'd like to count the number of unique JSESSION ids and the number of
> gets per ID, per hour etc.
>
> Any helps?
>
> Thanks, curt

I'm not sure if I can help you with that particular problem, but maybe
someone can help you with the firewall problem. Are you hosting
yourself, or are you getting hosted by someone else? I've never heard
of a firewall being set up in that manner.

Arccos

---
http://www.landoflyrics.com - Land of Lyrics

>- The firewall masks all incoming IPs as just one IP the firewall. So
>how to differentiate and count users?

Try matching user agent strings in a time window. Although most users
use IE, in practice the exact agent string varies quite a bit from
user to user.

Just a thought.
--
HTML-to-text and markup removal with Detagger
http://www.jafsoft.com/detagger/

Some analyzers allow to adjust a format of log file (for example,
AlterWind Log Analyzer). Try to adjust a format so that JSESSION it was
perceived, as a host.