-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">\r
-<html>\r
-<head>\r
-<meta name="description" content="AWStats Documentation - FAQ page">\r
-<meta name="keywords" content="awstats, awstat, faq, error, errors, frequently, asked, questions, support, help, problem, solution, troubleshooting, rotate log">\r
-<meta name="robots" content="index,follow">\r
-<meta name="title" content="AWStats Documentation - FAQs">\r
-<title>AWStats Documentation - FAQs</title>\r
-<link rel="stylesheet" href="styles.css" type="text/css">\r
-<!-- $Revision$ - $Author$ - $Date$ -->\r
-</head>\r
-\r
-<body topmargin=10 leftmargin=5>\r
-\r
-\r
-<table style="font: 10pt arial,helvetica,verdana" cellpadding=0 cellspacing=0 border=0 bgcolor=#FFFFFF width=100%>\r
-\r
-<!-- Large -->\r
-<tr style="font: 10pt arial,helvetica,verdana">\r
-<td bgcolor=#9999cc align=center><a href="/"><img src="images/awstats_logo4.png" border=0></a></td>\r
-<td bgcolor=#9999cc align=center>\r
-<br>\r
-<font style="font: 16pt arial,helvetica,sanserif" color=#EEEEFF><b>AWStats logfile analyzer 5.0 Documentation</b></font><br>\r
-<br>\r
-</td>\r
-<td bgcolor=#9999cc align=center>\r
- \r
-</td>\r
-</tr>\r
-\r
-</table>\r
-\r
-\r
-<br><br><H1 style="font: 26px arial,helvetica,sanserif">Frequently Asked Questions + Troubleshooting</H1>\r
-\r
-\r
-<br>\r
-<u>ABOUT QUESTIONS:</u><br>\r
-<ul>\r
-FAQ-ABO100 <a href="#SERVERSOS">Which web servers or operating systems are supported ?</a><br>\r
-FAQ-ABO150 <a href="#LOGFORMAT">Which log format can AWStats analyze ?</a><br>\r
-FAQ-ABO200 <a href="#LANG">Which languages are available ?</a><br>\r
-FAQ-ABO250 <a href="#PHPNUKE">Can AWStats be integrated with PHP Nuke ?</a><br>\r
-</ul>\r
-<br>\r
-\r
-<u>SETUP or ERROR QUESTIONS:</u><br>\r
-Here, you can find the most common questions and answers users have to install/setup AWStats.<br>\r
-<ul>\r
-FAQ-SET050 <a href="#MISSINGDOLLAR">Error "Missing $ on loop variable ..."</a><br>\r
-FAQ-SET100 <a href="#CGISOURCE">I see Perl script's source instead of its execution in my browser.</a><br>\r
-FAQ-SET150 <a href="#SPAWNERROR">Error "...couldn't create/spawn child process..." with Apache for windows.</a><br>\r
-FAQ-SET200 <a href="#INTERNAL">"Internal Error" or "Error 500" in a browser connecting to Apache.</a><br>\r
-FAQ-SET210 <a href="#SPEED">"Internal Error" after a long time in my browser (See FAQ-COM100 "AWStats speed/timeout problems").</a><br>\r
-FAQ-SET220 <a href="#IE6CRASH">IE6 crash while running awstats.pl</a><br>\r
-FAQ-SET250 <a href="#PERSONALIZEDLOG">Log format setup or errors.</a><br>\r
-FAQ-SET260 <a href="#FTP">Setup for FTP server log files.</a><br>\r
-FAQ-SET280 <a href="#NOTSAMENUMBER">Error "Not same number of records of...".</a><br>\r
-FAQ-SET300 <a href="#COULDNOTOPEN">Error "Couldn't open file ..."</a><br>\r
-FAQ-SET350 <a href="#EMPTY_STATS">Empty or null statistics reported.</a><br>\r
-FAQ-SET400 <a href="#REDIRECT">Pipe redirection to a file give me an empty file.</a><br>\r
-FAQ-SET450 <a href="#NO_ICON">No pictures/graphics shown.</a><br>\r
-FAQ-SET500 <a href="#ROTATE">How to rotate my logs without loosing data.</a><br>\r
-FAQ-SET550 <a href="#CRONTAB">How to run AWStats frequently ?</a><br>\r
-FAQ-SET600 <a href="#EXCLUDEHOSTS">How to exclude my IP address (or whole subnet mask) from stats ?</a><br>\r
-</ul>\r
-<br>\r
-\r
-<u>COMMON SUPPORT QUESTIONS:</u><br>\r
-Here, you can find the most common questions and answers users have when using AWStats.<br>\r
-<ul>\r
-FAQ-COM100 <a href="#SPEED">AWStats speed/timeout problems.</a><br>\r
-FAQ-COM150 <a href="#BENCHMARK">Benchmark question.</a><br>\r
-FAQ-COM200 <a href="#DNS">How reverse DNS Lookup works, unresolved IP Addresses ?</a><br>\r
-FAQ-COM250 <a href="#DIFFERENT_RESULTS">Different results than other log analyzers (Analog, Webalizer, WUsage, wwwStats...).</a><br>\r
-FAQ-COM300 <a href="#DIFFERENCE_HOURS">Difference between local hour and AWStats reported hour.</a><br>\r
-FAQ-COM350 <a href="#OLDLOG">How can I process old log file ?</a><br>\r
-FAQ-COM400 <a href="#MULTILOG">How can I update my statistics when I use a load balancing system that splits my logs ?</a><br>\r
-FAQ-COM500 <a href="#RESET">How can I reset all my statistics ?</a><br>\r
-FAQ-COM550 <a href="#EDITHISTORY">Can I safely remove a line in AWStats history files (awstatsMMYYYY*.txt) ?</a><br>\r
-</ul>\r
-<br>\r
-\r
-<u>SECURITY QUESTIONS:</u><br>\r
-Here, you can find the common questions about security problems when setting or using AWStats.<br>\r
-<ul>\r
-FAQ-SEC100 <a href="#CSSATTACK">Can AWStats be used to make Cross Site Scripting Attacks ?</a><br>\r
-FAQ-SEC150 <a href="#SECUSER">How can I prevent some users to see statistics of other users ?</a><br>\r
-FAQ-SEC200 <a href="#WORMS">How to manage log files (and statistics) corrupted by worms attacks like 'Code Red Virus like'.</a><br>\r
-</ul>\r
-<br>\r
-\r
-<hr>\r
-<br><br>\r
-<a name="SERVERSOS"></a><br>\r
-<b><u>FAQ-ABO100 : WHICH WEB SERVER OR OS ARE SUPPORTED ?</u></b><br>\r
-AWStats can works with all web server able to write log file with a <u>combined log format (XLF/ELF)</u> like Apache,\r
-a <u>common log format (CLF)</u> like Apache or Squid, an <u>W3C log format</u> like IIS 5.0 or higher (Some users have\r
-reported that you can setup your log format to W3C with IIS 4.0 but you need a service pack 6), and a lot of others\r
-Web/Wap/Proxy servers.<br>\r
-Because AWStats is in Perl, it can works on all Operating Systems.<br>\r
-Examples of used platforms (bold means 'tested by author', others were reported by AWStats users to work correctly) :<br>\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>OS:</u><br>\r
-<b>Windows NT 4.0</b>, <b>Windows 2000</b>, Windows Me, <b>Linux</b>, Macintosh, <b>Solaris</b>, <b>Aix</b>, BeOS, ...<br>\r
-<u>Web/Wap/Proxy servers</u><br>\r
-<b>Apache</b>, <b>IIS 5.0</b>, WebStar, WebLogic, WebSite, Squid, Roxen, IPlanet, IceCast, Zope, www4mail, ...<br>\r
-<u>Perl interpreters:</u><br>\r
-<b>ActivePerl 5.6</b>, <b>Perl for unix 5.0</b>, mod_perl for Apache, ...<br>\r
-</td></tr></table>\r
-<br>\r
-\r
-<a name="LOGFORMAT"></a><br>\r
-<b><u>FAQ-ABO150 : WHICH LOG FORMAT CAN AWSTATS ANALYZE ?</u></b><br>\r
-AWStats setup knows predefined log format you can use to make AWStats config easier. However,\r
-you can define your own log format, that's the reason why AWStats can analyze nearly all web, wap\r
-and proxy server log files. Some FTP servers are also supported.<br>\r
-The only requirement is "Your log file must contain required information".<br>\r
-This is example of possible log format:<br>\r
-<i>\r
-Apache combined log format (known as NCSA combined log format or XLF or ELF format) (See FAQ for this format)<br>\r
-IIS 5.0+ log format (known as W3C format)<br>\r
-Webstar native log format<br>\r
-ProFTP server<br>\r
-...<br>\r
-Apache common log format (AWStats can now analyze such log files but such log files does not contain all information\r
-AWStats is looking for. The problem is in the content, not in the format). I think analyzing common log files is not\r
-interesting because there is a lot of missing information: no way to filter robots, find search engines, keywords, os, browser.\r
-But a lot of users asked me for it, so AWStats support it. However, a lot of interesting advanced features can't work: browsers, os's, keywords, robot detection...).\r
-</i><br>\r
-See also <a href="#PERSONALIZEDLOG">F.A.Q.: LOG FORMAT SETUP OR ERRORS </a>.<br>\r
-<br>\r
-\r
-\r
-<a name="LANG"></a><br>\r
-<b><u>FAQ-ABO200 : WHICH LANGUAGES ARE AVAILABLE ?</u></b><br>\r
-AWStats can make reports in 28 languages. This is a list of all of them, for last version, in alphabetical order (with the code you can use\r
-for <a href="awstats_config.html#Lang">Lang</a> and <a href="awstats_config.html#ShowFlagLinks">ShowFlagLinks</a> parameter) :<br>\r
-<i>\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-Bosnian=ba, Chinese (Taiwan)=tw, Chinese (Traditional)=cn, Czech=cz,\r
-Danish=dk, Dutch=nl, English=en, Finnish=fi, French=fr, German=de,\r
-Greek=gr, Hungarian=hu, Indonesian=id, Italian=it, Japanese=jp, Korean=kr,\r
-Latvian=lv, Norwegian (Nynorsk)=nn, Norwegian (Bokmal)=nb, Polish=pl,\r
-Portuguese=pt, Portuguese (Brazilian)=br, Romanian=ro, Russian=ru,\r
-Spanish=es, Swedish=se, Turkish=tr, Ukrainian=ua\r
-</td></tr></table>\r
-</i>\r
-However, AWStats documentation is only provided in English.<br>\r
-But, you can find some documentation made by contributors:<br>\r
-In French: <a href="http://www.funix.org/fr/linux/main-linux.php3?ref=logapache&page=menu" target_doc>How to install AWStats and Webalizer</a><br>\r
-<br>\r
-\r
-<a name="PHPNUKE"></a><br>\r
-<b><u>FAQ-ABO250 : CAN AWSTATS BE INTEGRATED WITH PHP NUKE ?</u></b><br>\r
-I don't know any plan to make an Add-On for PHPNuke to include AWStats, for the moment.\r
-But this can change. You should ask to have a such Add-On to PHPNuke authors, and on PHPNuke forums.<br>\r
-<br>\r
-\r
-\r
-<hr><br>\r
-\r
-\r
-<a name="MISSINGDOLLAR"></a><br>\r
-<b><u>FAQ-SET050 : ERROR "MISSING $ ON LOOP VARIABLE ..."</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-When I run awstats.pl from command line, I get:<br>\r
-<i>"Missing $ on loop variable at awstats.pl line xxx"</i><br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-Problem is in your Perl interpreter. Try to install or reinstall a more recent/stable Perl interpreter.<br>\r
-You can get new Perl version at <a href="http://www.activestate.com/ActivePerl/">ActivePerl</a> (<font color=#221188>Win32</font>)\r
-or <a href="http://www.perl.com/pub/language/info/software.html">Perl.com</a> (<font color=#221188>Unix/Linux/Other</font>).<br>\r
-<br>\r
-\r
-<a name="CGISOURCE"></a><br>\r
-<b><u>FAQ-SET100 : I SEE PERL SCRIPT'S SOURCE INSTEAD OF ITS EXECUTION</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-When I try to execute the Perl script through the web server,\r
-I see the Perl script's source instead of the HTML result page of its execution !<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-This is not a problem of AWStats but a problem in your web server setup.\r
-awstats.pl file must be in a directory defined in your web server to be a "cgi" directory,\r
-this means, a directory configured in your web server to contain "executable" files and\r
-not to documents files.\r
-You have to read your web server manual to know how to setup a directory to be an\r
-"executable cgi" directory (With IIS, you have some checkbox to check in directory\r
-properties, with Apache you have to use the "ExecCGI" option in the directory "Directive").<br>\r
-<br>\r
-\r
-<a name="SPAWNERROR"></a><a name="INTERNAL"></a><br>\r
-<b><u>FAQ-SET150 : INTERNAL ERROR 500 IN MY BROWSER</u></b><br>\r
-<b><u>FAQ-SET200 : ERROR "... COULDN'T CREATE/SPAWN CHILD PROCESS..."</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-AWStats seems to run fine at the command prompt but when ran as a CGI from a browser, I get an <i>"Internal Error 500"</i>.<br>\r
-I also also might have the following message in my Apache error log file (or in browser with Apache 2.0+):<br>\r
-<i>...couldn't create/spawn child process: c:/mywebroot/cgi-bin/awstats.pl</i><br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-First, try to run awstats.pl from command line to see if file is correct. If you get some\r
-syntax errors and use a Unix like OS, check if your file is a Unix like text file (This\r
-means each line end with a LF char and not a CR+LF char).<br>\r
-If awstats.pl file runs correctly from command line, this is probably because your\r
-web server is not able to known how to run perl scripts. This problem can occur with Apache web\r
-servers with no internal Perl interpreter (mod_perl not active). To solve this, you must\r
-tell Apache where is your external Perl interpreter.<br>\r
-<u>For this, you have 2 solutions:</u><br>\r
-1) Add the following directive in your Apache <b>httpd.conf</b> config (or remove the # to uncomment it if line is already available)<br>\r
-<b><i>ScriptInterpreterSource registry</i></b><br>\r
-Then restart Apache. This will tell Apache to look into the registry to find the program associated to .pl extension.<br>\r
-2) Other solution (not necessary if first solution works): Change the first line of awstats.pl file with the full path of your Perl interpreter.<br>\r
-Example with Windows OS and ActivePerl Perl interpreter (installed in C:\Program Files\ActiveState\ActivePerl),\r
-you must change the first line of awstats.pl file with:<br>\r
-<i>#!c:/program files/activestate/activeperl/bin/perl</i><br>\r
-<br>\r
-\r
-<a name="IE6CRASH"></a><a name="IE6CRASH"></a><br>\r
-<b><u>FAQ-SET220 : IE6 CRASH WHILE RUNNING AWSTATS.PL</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-Sometimes IE6 crash while running awstats.pl with some AWStats configuration. Other versions or browsers works fine.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-A lot of users had experienced problems with IE6. It seems that this browser is not able to load a 60k text\r
-served by perl script which would read the 60k text file and then display the html page.\r
-The only solution is to wait of fix from MS or use another version (5.0, 5.5...) or browser (Netscape, Opera...).<br>\r
-<br>\r
-\r
-<a name="PERSONALIZEDLOG"></a><br>\r
-<b><u>FAQ-SET250 : LOG FORMAT SETUP OR ERRORS</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-Which value do I have to put in the LogFormat parameter to make AWStats working with my log file format ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-The AWStats config file give you all possible values for LogFormat parameter.\r
-To help you, this is some common cases of log file format, and\r
-the corresponding value for LogFormat you must use in your AWStats config file:<br>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>If your log records are EXACTLY like this (<b>NCSA combined/XLF/ELF</b> log format):</u><br>\r
-<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"</i><br>\r
-You must use : <i>LogFormat=1</i><br>\r
-This is same than: <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"</i><br>\r
-</td></tr></table>\r
-\r
-<u>If your log records are EXACTLY like this (<b>NCSA combined with several virtualhostname</b> sharing same log file).</u><br>\r
-<i>virtualserver1 62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"</i><br>\r
-You must use : <i>LogFormat="%virtualname %host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"</i><br>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>If your log records are EXACTLY like this (<b>NCSA combined</b> with <b>Apache using mod_gzip</b> format 1):</u><br>\r
-<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" mod_gzip: 66pct.</i><br>\r
-You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot %other %gzipratio"</i><br>\r
-</td></tr></table>\r
-\r
-<u>If your log records are EXACTLY like this (<b>NCSA combined</b> with <b>Apache using mod_gzip</b> format 2):</u><br>\r
-<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" mod_gzip: DECHUNK:OK In:11393 Out:3904:66pct.</i><br>\r
-You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot %other %other %gzipin %gzipout"</i><br>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>If your log records are EXACTLY like this (<b>NCSA common CLF</b> log format):</u><br>\r
-<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234</i><br>\r
-You must use : <i>LogFormat=4</i><br>\r
-Note: Browsers, OS's, Keywords and Referers features are not available with a such format.<br>\r
-</td></tr></table>\r
-\r
-<u>If your log records are EXACTLY like this (With some <b>Squid</b> versions):</u><br>\r
-<i>200.135.30.181 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET http://www.mysite.com/page.html HTTP/1.0" 200 456 TCP_CLIENT_REFRESH_MISS:DIRECT</i><br>\r
-You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %other"</i><br>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>If your log records are EXACTLY like this (<b>IIS</b> W3C log format):</u><br>\r
-<i>yyyy-mm-dd hh:mm:ss 62.161.78.73 - GET /page.html 200 1234 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+5.01;+Windows+NT+5.0) http://www.from.com/from.html</i><br>\r
-You must use : <i>LogFormat=2</i><br>\r
-</td></tr></table>\r
-\r
-<u>If your log records are EXACTLY like this (With some providers):</u><br>\r
-<i>62.161.78.73 - - [dd/Month/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" "-" 200 1234</i><br>\r
-You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %other %code %bytesd"</i><br>\r
-Note: Browsers, OS's, Keywords and Referers features are not available with a such format.<br>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>If your log records are EXACTLY like this (With some <b>WebSite</b> versions):</u><br>\r
-<i>yyyy-mm-dd hh:mm:ss 62.161.78.73 - 192.168.1.1 80 GET /page.html - 200 11205 0 0 HTTP/1.1 mydomain.com Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+98) - http://www.from.com/from.html</i><br>\r
-You must use : <i>LogFormat="%time2 %host %logname %other %other %method %url %other %code %bytesd %other %other %other %other %ua %other %referer"</i><br>\r
-</td></tr></table>\r
-\r
-<u>If your log records are EXACTLY like this (<b>Webstar</b> native log format):</u><br>\r
-<i>05/21/00 00:17:31 OK 200 212.242.30.6 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt) http://www.cover.dk/ "www.cover.dk" :Documentation:graphics:starninelogo.white.gif 1133</i><br>\r
-You must use : <i>LogFormat=3</i><br>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>If you use <b>ProFTP</b> server:</u><br>\r
-See Next FAQ.<br>\r
-</td></tr></table>\r
-\r
-<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>\r
-<u>There is a lot of other possible log formats.</u><br>\r
-You must use a personalized log format LogFormat ="..." as described in config file to\r
-support other various log formats.<br>\r
-</td></tr></table>\r
-<br>\r
-\r
-<a name="FTP"></a><br>\r
-<b><u>FAQ-SET260 : SETUP FOR FTP SERVER LOG FILES</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-What do I have to do to use AWStats to analyze some FTP server log files.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-AWStats was built to analyze web,wap or proxy server's log files. However it can be used with some FTP server log files.<br>\r
-<u>This is example for ProFTP:</u><br>\r
-Modify the proftpd.conf file. At the very top add two new defines.<br>\r
-<i>LogFormat awstats "%t %h %u GET %f 200 %b"<br>\r
-ExtendedLog /var/log/xferlog read,write awstats</i><br>\r
-Turn off Transfer log (optional)<br>\r
-<i>TransferLog none</i><br>\r
-Copy config awstats.conf file to "awstats.proftp.conf".<br>\r
-Modify this new config file:<br>\r
-<i>LogFile="/var/log/xferlog"<br>\r
-LogFormat="%time1 %host %logname %method %url %code %bytesd"<br>\r
-DNSLookup=0<br>\r
-ShowLinksOnUrl=0<br>\r
-ShowAuthenticatedUsers=1<br>\r
-</i>\r
-Warning: This tip doesn't work for FTPed files that contains spaces in them (they are not reported). You can still convert your\r
-log file to replace 'space' char into '_'...<br>\r
-<br>\r
-\r
-<a name="NOTSAMENUMBER"></a><br>\r
-<b><u>FAQ-SET280 : ERROR "NOT SAME NUMBER OF RECORDS OF..."</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-When I run AWStats from command line (or as a cgi from a browser), I get\r
-a message "Not same number of records of ...".<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-This means your AWStats reference database files (operating systems, browsers, robots...) are not correct.\r
-First try to update to 4.0. Then check in your disk that you have only ONE of those files. They should be\r
-in '<b>lib</b>' directory ('db' with 4.0) where awstats.pl is installed:<br>\r
-<i>browsers.pl</i><br>\r
-<i>operating_systems.pl</i><br>\r
-<i>robots.pl</i><br>\r
-<i>domains.pl</i><br>\r
-<i>search_engines.pl</i><br>\r
-<br>\r
-\r
-<a name="COULDNOTOPEN"></a><br>\r
-<b><u>FAQ-SET300 : ERROR "COULDN'T OPEN FILE ..."</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I have the following error:<br>\r
-<i>"Couldn't open file /workingpath/awstatsmmyyyy.tmp.9999: Permission denied."</i><br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-This error means that the web server didn't succeed in writing the working temporary file (file ended by .tmp.9999 \r
-where 9999 is a number) because of permissions problems.<br>\r
-First check that the directory <i>/workingpath</i> has "Write" permission for<br>\r
-user <u>nobody</u> (default user used by Apache on Linux systems)<br>\r
-or user <u>IUSR_<i>SERVERNAME</i></u> (default used user by IIS on NT).<br>\r
-With Unix, try with a path with no links.<br>\r
-With NT, you must check NTFS permissions ("Read/Write/Modify"), if your directory is on a NTFS partition.<br>\r
-With IIS, there is also a "Write" permission attribute, defined in directory properties \r
-in your IIS setup, that you must check.<br>\r
-With IIS, if a default cgi-bin directory was created during IIS install, try to \r
-put AWStats directly into this directory.<br>\r
-If this still fails, you can change the DirData parameter to say AWStats \r
-that you want to use another directory (A directory you are sure that the default \r
-user, used by web server process, can write into).<br>\r
-<br>\r
-\r
-<a name="EMPTY_STATS"></a><br>\r
-<b><u>FAQ-SET350 : EMPTY OR NULL STATISTICS REPORTED</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-AWStats seems to work but I'm not getting any results. i get a statistics page that looks like i have no hits.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-That's the one of the most common problem you can have and reason is simple: Your log file format setup is wrong.<br>\r
-<u>If you use Apache web server</u><br>\r
-The best way of working is to use the <i>"combined"</i> log format (See the <a href="awstats_setup.html">Setup and Use</a> page\r
-to know the way to change your Apache server log from <i>"common"</i> log format into <i>"combined"</i>).\r
-Don't forget to stop Apache, reset your log file and restart Apache to make change into combined\r
-effective. Then you must setup your AWStats config file with value <a href="awstats_config.html#LogFormat">LogFormat</a>=1.<br>\r
-If you want to use another format, read the next FAQ to have examples of LogFile value according\r
-to log files format.<br>\r
-<u>If you use IIS server or Windows built-in web server</u><br>\r
-The Internet Information Server default W3C Extended Log Format will not work correctly with AWStats.\r
-To make it work correctly, start the IIS Snap-in, select the web site and look at it's Properties.\r
-Choose W3C Extended Log Format, then Properties, then the Tab Extended Properties and uncheck everything\r
-under Extended Properties. Once they are all unchecked, check off the list given in\r
-the <a href="awstats_setup.html">Setup and Use</a> page ("With IIS Server" chapter).<br>\r
-You can also read the next FAQ to have examples of <a href="awstats_config.html#LogFormat">LogFormat</a> value according to log files format.<br>\r
-<br>\r
-\r
-<a name="REDIRECT"></a><br>\r
-<b><u>FAQ-SET400 : PIPE REDIRECTION TO A FILE GIVE ME AN EMPTY FILE</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I want to redirect awstats.pl output to a file with the following command :<br>\r
-<i>> awstats.pl -config=... [other_options] > myfile.html</i><br>\r
-But myfile.html is empty (size is 0). If i remove the redirection, everythings works correctly.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-This is not an AWStats bug but a problem between perl and Windows.<br>\r
-You can easily solve this running the following command instead:<br>\r
-<i>> perl awstats.pl -config=... [other_options] > myfile.html</i><br>\r
-<br>\r
-\r
-<a name="NO_ICON"></a><br>\r
-<b><u>FAQ-SET450 : NO PICTURES/GRAPHICS SHOWN</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-AWStats seems to work (all data and counters seem to be good) but I have no image shown.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-With Apache web server, you might have troubles (no picture shown on stats page) if you use a directory called "icons" (because of Apache\r
-pre-defined "icons" alias directory), so use instead, for example, a directory called "icon" with\r
-no s at the end (Rename your directory physically and change the <a href="awstats_config.html#DirIcons">DirIcons</a> parameter in config file\r
-to reflect this change).<br>\r
-<br>\r
-\r
-<a name="ROTATE"></a><br>\r
-<b><u>FAQ-SET500 : HOW TO ROTATE MY LOGS WITHOUT LOOSING DATA</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I want to archive/rotate my logs using my web server system options or a third software (rotatelog,\r
-cronolog) but don't want to loose any visits information during the rotate process.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-If you use a rotate system (internal web server feature or third software), this means you probably not use\r
-AWStats <a href="awstats_config.html#PurgeLogFile">PurgeLogFile</a> nor <a href="awstats_config.html#ArchiveLogRecords">ArchiveLogRecords</a> parameter.<br>\r
-* If your config file is setup to process current log file (because you want to use the <a href="awstats_config.html#AllowToUpdateStatsFromBrowser">AllowToUpdateStatsFromBrowser</a>\r
-option), if you don't want to loose any records during the rotate process, you can just run the AWStats update process \r
-on the archived log file just after the update process using the -logfile option (This will avoid you to change the config file).<br>\r
-* If you choose (for security reason, to avoid CPU abuse on large web site or other) to make updates by your scheduler only on archive files, this means\r
-you don't use the <a href="awstats_config.html#AllowToUpdateStatsFromBrowser">AllowToUpdateStatsFromBrowser</a> "real-time" feature of AWStats.\r
-In this case all you have to do is to run the update process just after the rotate was done using a config/domain file configured to\r
-process the archived log files (using date tags of <a href="awstats_config.html#LogFile">LogFile</a> for examples).<br>\r
-Note: For Apache users, use of <a href="http://cronolog.org" target=awstatsbis>cronolog</a> seems to be a better choice\r
-than rotatelog (cronolog is available for Unix/Linux and Windows and is more flexible).<br>\r
-To use cronolog or rotatelog you must setup your web server log file name using a pipe like this example:<br>\r
-<i>CustomLog "|/usr/sbin/cronolog [cronolog_options] /var/logs/access.%Y%m%d.log" combined</i><br>\r
-<br>\r
-\r
-\r
-\r
-<a name="CRONTAB"></a><br>\r
-<b><u>FAQ-SET550 : HOW TO RUN AWSTATS FREQUENTLY</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-AWStats must be ran frequently to update statistics. How can I do this ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-<br>\r
-<u>With Windows</u>, you can use the internal task scheduler.\r
-The use of this tool is not an AWStats related problem, so please take a look at your Windows manual.\r
-Warning, if you use <i>"awstats.pl -config=mysite -update"</i> in your scheduled task, you might\r
-experience problem of failing task. Try this instead<br>\r
-<i>"C:\WINNT\system32\CMD.EXE /C C:\[awstats_path]\awstats.pl -config=mysite -update"</i><br>\r
-or<br>\r
-<i>"C:\[perl_path]\perl.exe C:\[awstats_path]\awstats.pl -config=mysite -update"</i><br>\r
-A lot of other scheduler (sharewares/freewares) are very good.<br>\r
-<br>\r
-<u>With unix-like operating systems</u>, you can use the "<b>crontab</b>".<br>\r
-This is examples of lines you can add in the cron file (see your unix reference manual for cron) :<br>\r
-To run update every day at 04:00, use :<br>\r
-<i>0 4 * * * /opt/awstats/wwwroot/cgi-bin/awstats.pl -config=mysite -update</i><br>\r
-To run update every hour, use :<br>\r
-<i>0 * * * * /opt/awstats/wwwroot/cgi-bin/awstats.pl -config=mysite -update</i><br>\r
-<br>\r
-\r
-<a name="EXCLUDEHOSTS"></a><br>\r
-<b><u>FAQ-SET600 : HOW CAN I EXCLUDE MY IP ADDRESS (OR WHOLE SUBNET MASK) FROM STATS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I don't want to see my own IP address in the stats or I want to exclude counting visits from a whole subnet.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-You must edit the config file to change the <a href="awstats_config.html#SkipHosts">SkipHosts</a> parameter.<br>\r
-For example, to exclude:<br>\r
-- your own IP address 123.123.123.123, use <a href="awstats_config.html#SkipHosts">SkipHosts</a>="123.123.123.123"<br>\r
-- the whole subnet 123.123.123.xxx, use <a href="awstats_config.html#SkipHosts">SkipHosts</a>="123.123.123"<br>\r
-- all sub hosts xxx.myintranet.com, use <a href="awstats_config.html#SkipHosts">SkipHosts</a>=".myintranet.com" (This one works only if DNS lookup is already done in your\r
-log file).<br>\r
-<br> \r
-\r
-\r
-<hr><br>\r
-\r
-\r
-<a name="SPEED"></a><br>\r
-<b><u>FAQ-COM100 : AWSTATS SPEED/TIMEOUT PROBLEMS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-When I analyze large log files, processing times are very important (Update process from a browser\r
-returns a timeout/internal error after a long wait).\r
-Is there a setup or things to do to avoid this and increase speed ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-You really need to understand how a log analyzer works to have good speed.\r
-There is also major setup changes you can do to decrease your processing time.<br>\r
-- Launch AWStats more often (from crontab or a scheduler). More often you launch \r
-AWStats, more faster is AWStats (because the less is the number of NEW lines in \r
-log, since last run, to process). See the <a href="awstats_benchmark.html">Benchmark page</a> to\r
-get examples of launching frequency according to your web traffic<br>\r
-- You can disable <a href="awstats_config.html#DNSLookup">DNSLookup</a> in configure file (set <i>DNSLookup=0</i>) \r
-but this requires that hosts addresses in your log file are already resolved (need to setup your web server to do so) or that \r
-you don't need the domain/country report.\r
-Log analyze speed can be increased by 2 to 50 times but your web server will be slowed.<br>\r
-If you don't understand what is an "already resolved reverse DNS lookup", keep \r
-this parameter to 1.<br>\r
-- If you use Apache, set <a href="awstats_config.html#PurgeLogFile">PurgeLogFile</a> to 1 (By default, to avoid bad surprise, \r
-<i>PurgeLogFile</i> is 0 in configure file, but you can set it to 1 to ask AWStats \r
-to purge the log file after processing it. This increase speed for next run).<br>\r
-- Use last AWStats version.<br>\r
-<br>\r
-\r
-<a name="BENCHMARK"></a><br>\r
-<b><u>FAQ-COM150 : BENCHMARK / FREQUENCY TO LAUNCH AWSTATS TO UPDATE STATISTICS</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-What is AWStats speed ?<br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-What is the frequency to launch AWStats process to update my statistics ?<br>\r
-<font class=CSolution>SOLUTION:</font>\r
-All benchmarks information and advice on frequency for update process are related into\r
-the <a href="awstats_benchmark.html">Benchmark page</a>.<br>\r
-<br>\r
-\r
-<a name="DNS"></a><br>\r
-<b><u>FAQ-COM200 : HOW REVERSE DNS LOOKUP WORKS, UNRESOLVED IP ADDRESSES</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-The reported page AWStats shows me has no hostnames, only IP addresses, countries reported are all "unknown".<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-When AWStats find an IP address in your log file, it tries a reverse DNS lookup to find\r
-the hostname and domain if the <a href="awstats_tools.html#DNSLookup">DNSLookup</a> parameter, in your AWStats config file, is <a href="awstats_config.html#DNSLookup">DNSLookup</a>=1\r
-(Default value). So, first, check if you have the good value. The <a href="awstats_config.html#DNSLookup">DNSLookup</a>=0 \r
-must be used only if your log file contains already resolved IP address. For example, \r
-when you set up Apache with the <i>HostNameLookups=on</i> directive. When you \r
-ask your web server to make itself the reverse DNS lookup to log hostname instead \r
-of IP address, you will still find some IP addresses in your log file because \r
-the reverse DNS lookup is not always possible. But if your web server fails in \r
-it, AWStats will also fails (All reverse DNS lookups use the same system API). \r
-So to avoid AWStats to make an already done lookup (with success or not), you \r
-can set <a href="awstats_config.html#DNSLookup">DNSLookup</a>=0 in AWStats config file.\r
-If you prefer, you can make the reverse DNS lookup on a log file before running\r
-your log analyzer (If you only need to convert a logfile with IP Addresses into a\r
-logfile with resolved hostnames). You can use for this <a href="awstats_config.html#logresolvemerge">logresolvemerge</a> tool\r
-provided with AWStats distribution (This tools is an improved version of <i>logresolve</i> provided with Apache).<br>\r
-<br>\r
-\r
-<a name="DIFFERENT_RESULTS"></a><br>\r
-<b><u>FAQ-COM250 : DIFFERENT RESULTS THAN OTHER ANALYZER</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I also use webalizer (or another log analyzer) and it doesn't report the same results than AWStats. Why ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-If you compare AWStats results with an other log file analyzer, you will found some differences,\r
-sometimes very important. In fact, all analyzer (even AWStats) make "over reporting" because of the\r
-problem of proxy-servers and robots. However AWStats is one the most accurate and its "over reporting"\r
-is very low where all other analyzers, even the most famous, have a very high error rate (10% to 2x more than reality).<br>\r
-This is the most important reasons why you will find differences:<br>\r
-- Some dynamic pages generated by CGI programs are not counted by some analyzer (ie Webalizer) like\r
-a "Page" (but only like a "Hit") if CGI prog has not a .cgi extension, so they are not included\r
-correctly in their statistics. AWStats does not make this error and all CGI pages are pages.<br>\r
-- AWStats is the alone analyzer (that i know for the moment) able to detect robots visits.\r
-All other analyzers think it's a human visitor. This error make them to report more visits and visitors\r
-than reality. This does not happen with AWStats. When it tells "1 visitor", it means "1 human visitor".\r
-All robots hits are reported in the "Robots/Spiders visitors" chart.<br>\r
-- A lot of analyzer (ie webalizer) use the "Hits" to count visitors. This is not a good way of working :\r
-Some visitors use a lot of proxy servers to surf (ie: AOL users), this means it's possible that several\r
-hosts (with several IP addresses) are used to reach your site for only one visitor (ie: one proxy server download\r
-the page and 2 other servers download all images). Because of this, if stats of unique visitors are made on "hits",\r
-3 users are reported but it's wrong. So AWStats, like HitBox, considers only HTML "Pages" to count unique visitors.\r
-This decrease the error, not completely, because it's always possible that a proxy server download one HTML frame and\r
-another one download another frame, but this make the over-reporting of unique visitors less important.<br>\r
-There is also differences in log analyzers databases and algorithms that make details of results less or more accurate:<br>\r
-- AWStats has a larger browser, os and search engine database, so reports concerning this are more accurate.<br>\r
-- AWStats has url syntax rules to find keywords or keyphrases used to find your site, but AWStats has also\r
-an algorithm to detect keywords of unknown search engines with unknown url syntax rule.<br>\r
-<br>\r
-\r
-<a name="DIFFERENCE_HOURS"></a><br>\r
-<b><u>FAQ-COM300 : DIFFERENCE BETWEEN LOCAL HOURS AND AWSTATS REPORTED HOURS</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I use IIS and there's a difference between local hour and AWStats reported hour. For example I made a hit on a page \r
-at 4:00 and AWStats report I hit it at 2:00.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-This is not a problem of time in your local client host.\r
-AWStats use only time reported in logs by your server \r
-and all time are related to server hour. The problem is that IIS in some foreign \r
-versions puts GMT time in its log file (and not local time). So, you have also \r
-GMT time in your statistics.<br>\r
-You can do nothing, for the moment, but waiting that Microsoft change this in next\r
-IIS versions. However, Microsoft sheet Q271196 "IIS Log File Entries \r
-Have the Incorrect Date and Time Stamp" says: <br>\r
-<i>The selected log file format is the W3C Extended Log File \r
-Format. The extended log file format is defined in the W3C \r
-Working Draft WD-logfile-960323 specification by Phillip \r
-M. Hallam-Baker and Brian Behlendorf. This document defines \r
-the Date and Time files to always be in GMT. This behavior \r
-is by design.</i><br>\r
-So this means this way of working might never be changed.<br>\r
-<br>\r
-\r
-<a name="OLDLOG"></a><br>\r
-<b><u>FAQ-COM350 : HOW CAN I PROCESS OLD LOG FILE ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I want to process an old log file to include its data in my AWStats reports.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-You must change your <a href="awstats_config.html#LogFile">LogFile</a> parameter to point to the old log file and run\r
-the update (or use the -logformat option on command line to overwrite <a href="awstats_config.html#LogFile">LogFile</a> parameter).\r
-The update process can only accept files in chronological order, so if you have already processed a recent file,\r
-you must before reset all your statistics (see next FAQ) and restart all the update process for all past log files\r
-and in chronological order.<br>\r
-<br>\r
-\r
-<a name="MULTILOG"></a><br>\r
-<b><u>FAQ-COM400 : HOW CAN I UPDATE MY STATISTICS WHEN I USE A LOAD BALANCING SYSTEM THAT SPLITS MY LOGS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-How can I update my statistics when i use a load balancing system that split my logs ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-The best solution is to merge all split log files resulted from all your load balanced servers into one. For this, you can use\r
-the <a href="awstats_config.html#logresolvemerge">logresolvemerge</a> tool provided with AWStats :<br>\r
-<i>logresolvemerge.pl file1.log file2.log ... filen.log > newfiletoprocess.log</i><br>\r
-And setup the <a href="awstats_config.html#LogFile">LogFile</a> parameter in your config file to process the <i>newfiletoprocess.log</i> file or use\r
-the <i>-logfile</i> command line option to overwrite <a href="awstats_config.html#LogFile">LogFile</a> value.<br>\r
-<br>\r
-\r
-<a name="RESET"></a><br>\r
-<b><u>FAQ-COM500 : HOW CAN I RESET ALL MY STATISTICS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I want to reset all my statistics and restart my stats from now.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-All analyzed data are stored by AWStats in files called <i>awstatsMMYYYY.[site.]txt</i> (one file each month).\r
-You will find those files in directory defined by <a href="awstats_config.html#DirData">DirData</a> parameter (same directory than awstats.pl by default).<br>\r
-To reset your stats for a month, you just have to delete the file for the required month/year.<br>\r
-To reset all your stats, delete all files awstats*.txt<br>\r
-Warning, if you delete those data files, you won't be able to recover your stats back, unless you kept old log files somewhere.\r
-You will have to process all past log files (in chronological order) to get old statistics back.<br>\r
-<br>\r
-\r
-<a name="EDITHISTORY"></a><br>\r
-<b><u>FAQ-COM550 : CAN I SAFELY REMOVE A LINE IN HISTORY FILES (awstatsMMYYYY*.txt) ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-After processing a log file I want to change my statistics\r
-without running AWStats update process but changing directly data in AWStats historical database files.<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-If you remove a lines starting with "BEGIN_" or "END_", AWStats will find your file "corrupted" so you must not change those\r
-kind of lines. All lines that are not in any "section" (between a BEGIN_xxx and END_xxx line) should also not be removed.\r
-However you can change any line that is a "section record", but you do this at your own risk. Your reported stats\r
-might have wrong values after that.<br>\r
-<br>\r
-\r
-<hr><br>\r
-\r
-<a name="CSSATTACK"></a><br>\r
-<b><u>FAQ-SEC100 : CAN AWSTATS BE USED TO MAKE CROSS SITE SCRIPTING ATTACKS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-If a bad user use a browser to make a hit on an URL that include a < SCRIPT > ... < /SCRIPT >\r
-section in its parameter, when AWStats will show the links on the report page, does the script will be executed ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-No. AWStats use a filter to remove all scripts codes that was included in an URL to make a Cross Site Scripting Attack using a\r
-log analyzer report page.<br>\r
-<br>\r
-\r
-<a name="SECUSER"></a><br>\r
-<b><u>FAQ-SEC150 : HOW CAN I PREVENT SOME USERS TO SEE STATISTICS OF OTHER USERS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-I don't want a user xxx (having a site www.xxx.com) to see statistics of user yyy (having\r
-a site www.yyy.com). How can i setup AWStats for this ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-Take a look at the <a href="awstats_security.html">security page</a>.<br>\r
-<br>\r
-\r
-<a name="WORMS"></a><br>\r
-<b><u>FAQ-SEC200 : HOW TO MANAGE LOG FILES (AND STATISTICS) CORRUPTED BY 'CODE RED VIRUS LIKE' ATTACKS ?</u></b><br>\r
-<font class=CProblem>PROBLEM:</font><br>\r
-My site is attacked by some Code Red Viruses. This make my log file corrupted\r
-and full of 404 errors. So my statistics are also full of 404 errors. This make AWStats slower and my history files very large.\r
-Can I do something to avoid this ?<br>\r
-<font class=CSolution>SOLUTION:</font><br>\r
-Yes.<br>\r
-'Code Red virus like' attacks are infected browsers or robots that make hits on your site using a very long unknown URL\r
-like this one (hoping your server is IIS):<br>\r
-<i>/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%40%50...%40%50</i><br>\r
-URL is generated by the infected robot and the purpose is to exploit a vulnerability of the web server (only IIS is concerned by Code Red worm).\r
-So you will often find a 'common string' in those URLs. For example, with Code Red worm, there is always default.ida in the URL string.\r
-So, you should edit your config file to add in the <a href="awstats_config.html#SkipFiles">SkipFiles</a> parameter the following value:<br>\r
-<i>SkipFiles="default.ida"</i><br>\r
-<br>\r
-\r
-\r
-<hr>\r
-<script language="javascript">\r
- var lastmod = new Date(document.lastModified);\r
- if (lastmod.getDate() > 0) {\r
- if (lastmod.getDate()<10) zerod="0"\r
- else zerod="";\r
- if (lastmod.getMonth()<9) zerom="0"\r
- else zerom=""\r
- year2kok=lastmod.getYear();\r
- if (year2kok<100) year2kok+=2000;\r
- if ((year2kok>=100) && (year2kok < 1970)) year2kok+=1900;\r
- document.writeln("Last revision: "+year2kok+"-"+zerom+(lastmod.getMonth()+1)+"-"+zerod+lastmod.getDate());\r
- }\r
-</script>\r
-\r
-</body>\r
-</html>\r
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
+<html>
+<head>
+<meta name="description" content="AWStats Documentation - FAQ page">
+<meta name="keywords" content="awstats, awstat, faq, error, errors, frequently, asked, questions, support, help, problem, solution, troubleshooting, rotate log">
+<meta name="robots" content="index,follow">
+<meta name="title" content="AWStats Documentation - FAQs">
+<title>AWStats Documentation - FAQs</title>
+<link rel="stylesheet" href="styles.css" type="text/css">
+<!-- $Revision$ - $Author$ - $Date$ -->
+</head>
+
+<body topmargin=10 leftmargin=5>
+
+
+<table style="font: 10pt arial,helvetica,verdana" cellpadding=0 cellspacing=0 border=0 bgcolor=#FFFFFF width=100%>
+
+<!-- Large -->
+<tr style="font: 10pt arial,helvetica,verdana">
+<td bgcolor=#9999cc align=center><a href="/"><img src="images/awstats_logo4.png" border=0></a></td>
+<td bgcolor=#9999cc align=center>
+<br>
+<font style="font: 16pt arial,helvetica,sanserif" color=#EEEEFF><b>AWStats logfile analyzer 5.0 Documentation</b></font><br>
+<br>
+</td>
+<td bgcolor=#9999cc align=center>
+
+</td>
+</tr>
+
+</table>
+
+
+<br><br><H1 style="font: 26px arial,helvetica,sanserif">Frequently Asked Questions + Troubleshooting</H1>
+
+
+<br>
+<u>ABOUT QUESTIONS:</u><br>
+<ul>
+FAQ-ABO100 <a href="#SERVERSOS">Which web servers or operating systems are supported ?</a><br>
+FAQ-ABO150 <a href="#LOGFORMAT">Which log format can AWStats analyze ?</a><br>
+FAQ-ABO200 <a href="#LANG">Which languages are available ?</a><br>
+FAQ-ABO250 <a href="#PHPNUKE">Can AWStats be integrated with PHP Nuke ?</a><br>
+</ul>
+<br>
+
+<u>SETUP or ERROR QUESTIONS:</u><br>
+Here, you can find the most common questions and answers users have to install/setup AWStats.<br>
+<ul>
+FAQ-SET050 <a href="#MISSINGDOLLAR">Error "Missing $ on loop variable ..."</a><br>
+FAQ-SET100 <a href="#CGISOURCE">I see Perl script's source instead of its execution in my browser.</a><br>
+FAQ-SET150 <a href="#SPAWNERROR">Error "...couldn't create/spawn child process..." with Apache for windows.</a><br>
+FAQ-SET200 <a href="#INTERNAL">"Internal Error" or "Error 500" in a browser connecting to Apache.</a><br>
+FAQ-SET210 <a href="#SPEED">"Internal Error" after a long time in my browser (See FAQ-COM100 "AWStats speed/timeout problems").</a><br>
+FAQ-SET220 <a href="#IE6CRASH">IE6 crash while running awstats.pl</a><br>
+FAQ-SET250 <a href="#PERSONALIZEDLOG">Log format setup or errors.</a><br>
+FAQ-SET260 <a href="#FTP">Setup for FTP server log files.</a><br>
+FAQ-SET280 <a href="#NOTSAMENUMBER">Error "Not same number of records of...".</a><br>
+FAQ-SET300 <a href="#COULDNOTOPEN">Error "Couldn't open file ..."</a><br>
+FAQ-SET350 <a href="#EMPTY_STATS">Empty or null statistics reported.</a><br>
+FAQ-SET400 <a href="#REDIRECT">Pipe redirection to a file give me an empty file.</a><br>
+FAQ-SET450 <a href="#NO_ICON">No pictures/graphics shown.</a><br>
+FAQ-SET500 <a href="#ROTATE">How to rotate my logs without loosing data.</a><br>
+FAQ-SET550 <a href="#CRONTAB">How to run AWStats frequently ?</a><br>
+FAQ-SET600 <a href="#EXCLUDEHOSTS">How to exclude my IP address (or whole subnet mask) from stats ?</a><br>
+</ul>
+<br>
+
+<u>COMMON SUPPORT QUESTIONS:</u><br>
+Here, you can find the most common questions and answers users have when using AWStats.<br>
+<ul>
+FAQ-COM100 <a href="#SPEED">AWStats speed/timeout problems.</a><br>
+FAQ-COM150 <a href="#BENCHMARK">Benchmark question.</a><br>
+FAQ-COM200 <a href="#DNS">How reverse DNS Lookup works, unresolved IP Addresses ?</a><br>
+FAQ-COM250 <a href="#DIFFERENT_RESULTS">Different results than other log analyzers (Analog, Webalizer, WUsage, wwwStats...).</a><br>
+FAQ-COM300 <a href="#DIFFERENCE_HOURS">Difference between local hour and AWStats reported hour.</a><br>
+FAQ-COM350 <a href="#OLDLOG">How can I process old log file ?</a><br>
+FAQ-COM400 <a href="#MULTILOG">How can I update my statistics when I use a load balancing system that splits my logs ?</a><br>
+FAQ-COM500 <a href="#RESET">How can I reset all my statistics ?</a><br>
+FAQ-COM550 <a href="#EDITHISTORY">Can I safely remove a line in AWStats history files (awstatsMMYYYY*.txt) ?</a><br>
+</ul>
+<br>
+
+<u>SECURITY QUESTIONS:</u><br>
+Here, you can find the common questions about security problems when setting or using AWStats.<br>
+<ul>
+FAQ-SEC100 <a href="#CSSATTACK">Can AWStats be used to make Cross Site Scripting Attacks ?</a><br>
+FAQ-SEC150 <a href="#SECUSER">How can I prevent some users to see statistics of other users ?</a><br>
+FAQ-SEC200 <a href="#WORMS">How to manage log files (and statistics) corrupted by worms attacks like 'Code Red Virus like'.</a><br>
+</ul>
+<br>
+
+<hr>
+<br><br>
+<a name="SERVERSOS"></a><br>
+<b><u>FAQ-ABO100 : WHICH WEB SERVER OR OS ARE SUPPORTED ?</u></b><br>
+AWStats can works with all web server able to write log file with a <u>combined log format (XLF/ELF)</u> like Apache,
+a <u>common log format (CLF)</u> like Apache or Squid, an <u>W3C log format</u> like IIS 5.0 or higher (Some users have
+reported that you can setup your log format to W3C with IIS 4.0 but you need a service pack 6), and a lot of others
+Web/Wap/Proxy servers.<br>
+Because AWStats is in Perl, it can works on all Operating Systems.<br>
+Examples of used platforms (bold means 'tested by author', others were reported by AWStats users to work correctly) :<br>
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>OS:</u><br>
+<b>Windows NT 4.0</b>, <b>Windows 2000</b>, Windows Me, <b>Linux</b>, Macintosh, <b>Solaris</b>, <b>Aix</b>, BeOS, ...<br>
+<u>Web/Wap/Proxy servers</u><br>
+<b>Apache</b>, <b>IIS 5.0</b>, WebStar, WebLogic, WebSite, Squid, Roxen, IPlanet, IceCast, Zope, www4mail, ...<br>
+<u>Perl interpreters:</u><br>
+<b>ActivePerl 5.6</b>, <b>Perl for unix 5.0</b>, mod_perl for Apache, ...<br>
+</td></tr></table>
+<br>
+
+<a name="LOGFORMAT"></a><br>
+<b><u>FAQ-ABO150 : WHICH LOG FORMAT CAN AWSTATS ANALYZE ?</u></b><br>
+AWStats setup knows predefined log format you can use to make AWStats config easier. However,
+you can define your own log format, that's the reason why AWStats can analyze nearly all web, wap
+and proxy server log files. Some FTP servers are also supported.<br>
+The only requirement is "Your log file must contain required information".<br>
+This is example of possible log format:<br>
+<i>
+Apache combined log format (known as NCSA combined log format or XLF or ELF format) (See FAQ for this format)<br>
+IIS 5.0+ log format (known as W3C format)<br>
+Webstar native log format<br>
+ProFTP server<br>
+...<br>
+Apache common log format (AWStats can now analyze such log files but such log files does not contain all information
+AWStats is looking for. The problem is in the content, not in the format). I think analyzing common log files is not
+interesting because there is a lot of missing information: no way to filter robots, find search engines, keywords, os, browser.
+But a lot of users asked me for it, so AWStats support it. However, a lot of interesting advanced features can't work: browsers, os's, keywords, robot detection...).
+</i><br>
+See also <a href="#PERSONALIZEDLOG">F.A.Q.: LOG FORMAT SETUP OR ERRORS </a>.<br>
+<br>
+
+
+<a name="LANG"></a><br>
+<b><u>FAQ-ABO200 : WHICH LANGUAGES ARE AVAILABLE ?</u></b><br>
+AWStats can make reports in 28 languages. This is a list of all of them, for last version, in alphabetical order (with the code you can use
+for <a href="awstats_config.html#Lang">Lang</a> and <a href="awstats_config.html#ShowFlagLinks">ShowFlagLinks</a> parameter) :<br>
+<i>
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+Bosnian=ba, Chinese (Taiwan)=tw, Chinese (Traditional)=cn, Czech=cz,
+Danish=dk, Dutch=nl, English=en, Finnish=fi, French=fr, German=de,
+Greek=gr, Hungarian=hu, Indonesian=id, Italian=it, Japanese=jp, Korean=kr,
+Latvian=lv, Norwegian (Nynorsk)=nn, Norwegian (Bokmal)=nb, Polish=pl,
+Portuguese=pt, Portuguese (Brazilian)=br, Romanian=ro, Russian=ru,
+Spanish=es, Swedish=se, Turkish=tr, Ukrainian=ua
+</td></tr></table>
+</i>
+However, AWStats documentation is only provided in English.<br>
+But, you can find some documentation made by contributors:<br>
+In French: <a href="http://www.funix.org/fr/linux/main-linux.php3?ref=logapache&page=menu" target_doc>How to install AWStats and Webalizer</a><br>
+<br>
+
+<a name="PHPNUKE"></a><br>
+<b><u>FAQ-ABO250 : CAN AWSTATS BE INTEGRATED WITH PHP NUKE ?</u></b><br>
+I don't know any plan to make an Add-On for PHPNuke to include AWStats, for the moment.
+But this can change. You should ask to have a such Add-On to PHPNuke authors, and on PHPNuke forums.<br>
+<br>
+
+
+<hr><br>
+
+
+<a name="MISSINGDOLLAR"></a><br>
+<b><u>FAQ-SET050 : ERROR "MISSING $ ON LOOP VARIABLE ..."</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+When I run awstats.pl from command line, I get:<br>
+<i>"Missing $ on loop variable at awstats.pl line xxx"</i><br>
+<font class=CSolution>SOLUTION:</font><br>
+Problem is in your Perl interpreter. Try to install or reinstall a more recent/stable Perl interpreter.<br>
+You can get new Perl version at <a href="http://www.activestate.com/ActivePerl/">ActivePerl</a> (<font color=#221188>Win32</font>)
+or <a href="http://www.perl.com/pub/language/info/software.html">Perl.com</a> (<font color=#221188>Unix/Linux/Other</font>).<br>
+<br>
+
+<a name="CGISOURCE"></a><br>
+<b><u>FAQ-SET100 : I SEE PERL SCRIPT'S SOURCE INSTEAD OF ITS EXECUTION</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+When I try to execute the Perl script through the web server,
+I see the Perl script's source instead of the HTML result page of its execution !<br>
+<font class=CSolution>SOLUTION:</font><br>
+This is not a problem of AWStats but a problem in your web server setup.
+awstats.pl file must be in a directory defined in your web server to be a "cgi" directory,
+this means, a directory configured in your web server to contain "executable" files and
+not to documents files.
+You have to read your web server manual to know how to setup a directory to be an
+"executable cgi" directory (With IIS, you have some checkbox to check in directory
+properties, with Apache you have to use the "ExecCGI" option in the directory "Directive").<br>
+<br>
+
+<a name="SPAWNERROR"></a><a name="INTERNAL"></a><br>
+<b><u>FAQ-SET150 : INTERNAL ERROR 500 IN MY BROWSER</u></b><br>
+<b><u>FAQ-SET200 : ERROR "... COULDN'T CREATE/SPAWN CHILD PROCESS..."</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+AWStats seems to run fine at the command prompt but when ran as a CGI from a browser, I get an <i>"Internal Error 500"</i>.<br>
+I also also might have the following message in my Apache error log file (or in browser with Apache 2.0+):<br>
+<i>...couldn't create/spawn child process: c:/mywebroot/cgi-bin/awstats.pl</i><br>
+<font class=CSolution>SOLUTION:</font><br>
+First, try to run awstats.pl from command line to see if file is correct. If you get some
+syntax errors and use a Unix like OS, check if your file is a Unix like text file (This
+means each line end with a LF char and not a CR+LF char).<br>
+If awstats.pl file runs correctly from command line, this is probably because your
+web server is not able to known how to run perl scripts. This problem can occur with Apache web
+servers with no internal Perl interpreter (mod_perl not active). To solve this, you must
+tell Apache where is your external Perl interpreter.<br>
+<u>For this, you have 2 solutions:</u><br>
+1) Add the following directive in your Apache <b>httpd.conf</b> config (or remove the # to uncomment it if line is already available)<br>
+<b><i>ScriptInterpreterSource registry</i></b><br>
+Then restart Apache. This will tell Apache to look into the registry to find the program associated to .pl extension.<br>
+2) Other solution (not necessary if first solution works): Change the first line of awstats.pl file with the full path of your Perl interpreter.<br>
+Example with Windows OS and ActivePerl Perl interpreter (installed in C:\Program Files\ActiveState\ActivePerl),
+you must change the first line of awstats.pl file with:<br>
+<i>#!c:/program files/activestate/activeperl/bin/perl</i><br>
+<br>
+
+<a name="IE6CRASH"></a><a name="IE6CRASH"></a><br>
+<b><u>FAQ-SET220 : IE6 CRASH WHILE RUNNING AWSTATS.PL</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+Sometimes IE6 crash while running awstats.pl with some AWStats configuration. Other versions or browsers works fine.<br>
+<font class=CSolution>SOLUTION:</font><br>
+A lot of users had experienced problems with IE6. It seems that this browser is not able to load a 60k text
+served by perl script which would read the 60k text file and then display the html page.
+The only solution is to wait of fix from MS or use another version (5.0, 5.5...) or browser (Netscape, Opera...).<br>
+<br>
+
+<a name="PERSONALIZEDLOG"></a><br>
+<b><u>FAQ-SET250 : LOG FORMAT SETUP OR ERRORS</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+Which value do I have to put in the LogFormat parameter to make AWStats working with my log file format ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+The AWStats config file give you all possible values for LogFormat parameter.
+To help you, this is some common cases of log file format, and
+the corresponding value for LogFormat you must use in your AWStats config file:<br>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>If your log records are EXACTLY like this (<b>NCSA combined/XLF/ELF</b> log format):</u><br>
+<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"</i><br>
+You must use : <i>LogFormat=1</i><br>
+This is same than: <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"</i><br>
+</td></tr></table>
+
+<u>If your log records are EXACTLY like this (<b>NCSA combined with several virtualhostname</b> sharing same log file).</u><br>
+<i>virtualserver1 62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"</i><br>
+You must use : <i>LogFormat="%virtualname %host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot"</i><br>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>If your log records are EXACTLY like this (<b>NCSA combined</b> with <b>Apache using mod_gzip</b> format 1):</u><br>
+<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" mod_gzip: 66pct.</i><br>
+You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot %other %gzipratio"</i><br>
+</td></tr></table>
+
+<u>If your log records are EXACTLY like this (<b>NCSA combined</b> with <b>Apache using mod_gzip</b> format 2):</u><br>
+<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234 "http://www.from.com/from.htm" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)" mod_gzip: DECHUNK:OK In:11393 Out:3904:66pct.</i><br>
+You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %refererquot %uaquot %other %other %gzipin %gzipout"</i><br>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>If your log records are EXACTLY like this (<b>NCSA common CLF</b> log format):</u><br>
+<i>62.161.78.73 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" 200 1234</i><br>
+You must use : <i>LogFormat=4</i><br>
+Note: Browsers, OS's, Keywords and Referers features are not available with a such format.<br>
+</td></tr></table>
+
+<u>If your log records are EXACTLY like this (With some <b>Squid</b> versions):</u><br>
+<i>200.135.30.181 - - [dd/mmm/yyyy:hh:mm:ss +0x00] "GET http://www.mysite.com/page.html HTTP/1.0" 200 456 TCP_CLIENT_REFRESH_MISS:DIRECT</i><br>
+You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %code %bytesd %other"</i><br>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>If your log records are EXACTLY like this (<b>IIS</b> W3C log format):</u><br>
+<i>yyyy-mm-dd hh:mm:ss 62.161.78.73 - GET /page.html 200 1234 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+5.01;+Windows+NT+5.0) http://www.from.com/from.html</i><br>
+You must use : <i>LogFormat=2</i><br>
+</td></tr></table>
+
+<u>If your log records are EXACTLY like this (With some providers):</u><br>
+<i>62.161.78.73 - - [dd/Month/yyyy:hh:mm:ss +0x00] "GET /page.html HTTP/1.1" "-" 200 1234</i><br>
+You must use : <i>LogFormat="%host %other %logname %time1 %methodurl %other %code %bytesd"</i><br>
+Note: Browsers, OS's, Keywords and Referers features are not available with a such format.<br>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>If your log records are EXACTLY like this (With some <b>WebSite</b> versions):</u><br>
+<i>yyyy-mm-dd hh:mm:ss 62.161.78.73 - 192.168.1.1 80 GET /page.html - 200 11205 0 0 HTTP/1.1 mydomain.com Mozilla/4.0+(compatible;+MSIE+5.5;+Windows+98) - http://www.from.com/from.html</i><br>
+You must use : <i>LogFormat="%time2 %host %logname %other %other %method %url %other %code %bytesd %other %other %other %other %ua %other %referer"</i><br>
+</td></tr></table>
+
+<u>If your log records are EXACTLY like this (<b>Webstar</b> native log format):</u><br>
+<i>05/21/00 00:17:31 OK 200 212.242.30.6 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt) http://www.cover.dk/ "www.cover.dk" :Documentation:graphics:starninelogo.white.gif 1133</i><br>
+You must use : <i>LogFormat=3</i><br>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>If you use <b>ProFTP</b> server:</u><br>
+See Next FAQ.<br>
+</td></tr></table>
+
+<table bgcolor=#F0F0F0 width="100%" class=CFAQ><tr class=CFAQ><td class=CFAQ>
+<u>There is a lot of other possible log formats.</u><br>
+You must use a personalized log format LogFormat ="..." as described in config file to
+support other various log formats.<br>
+</td></tr></table>
+<br>
+
+<a name="FTP"></a><br>
+<b><u>FAQ-SET260 : SETUP FOR FTP SERVER LOG FILES</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+What do I have to do to use AWStats to analyze some FTP server log files.<br>
+<font class=CSolution>SOLUTION:</font><br>
+AWStats was built to analyze web,wap or proxy server's log files. However it can be used with some FTP server log files.<br>
+<u>This is example for ProFTP:</u><br>
+Modify the proftpd.conf file. At the very top add two new defines.<br>
+<i>LogFormat awstats "%t %h %u GET %f 200 %b"<br>
+ExtendedLog /var/log/xferlog read,write awstats</i><br>
+Turn off Transfer log (optional)<br>
+<i>TransferLog none</i><br>
+Copy config awstats.conf file to "awstats.proftp.conf".<br>
+Modify this new config file:<br>
+<i>LogFile="/var/log/xferlog"<br>
+LogFormat="%time1 %host %logname %method %url %code %bytesd"<br>
+DNSLookup=0<br>
+ShowLinksOnUrl=0<br>
+ShowAuthenticatedUsers=1<br>
+</i>
+Warning: This tip doesn't work for FTPed files that contains spaces in them (they are not reported). You can still convert your
+log file to replace 'space' char into '_'...<br>
+<br>
+
+<a name="NOTSAMENUMBER"></a><br>
+<b><u>FAQ-SET280 : ERROR "NOT SAME NUMBER OF RECORDS OF..."</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+When I run AWStats from command line (or as a cgi from a browser), I get
+a message "Not same number of records of ...".<br>
+<font class=CSolution>SOLUTION:</font><br>
+This means your AWStats reference database files (operating systems, browsers, robots...) are not correct.
+First try to update to 4.0. Then check in your disk that you have only ONE of those files. They should be
+in '<b>lib</b>' directory ('db' with 4.0) where awstats.pl is installed:<br>
+<i>browsers.pl</i><br>
+<i>operating_systems.pl</i><br>
+<i>robots.pl</i><br>
+<i>domains.pl</i><br>
+<i>search_engines.pl</i><br>
+<br>
+
+<a name="COULDNOTOPEN"></a><br>
+<b><u>FAQ-SET300 : ERROR "COULDN'T OPEN FILE ..."</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I have the following error:<br>
+<i>"Couldn't open file /workingpath/awstatsmmyyyy.tmp.9999: Permission denied."</i><br>
+<font class=CSolution>SOLUTION:</font><br>
+This error means that the web server didn't succeed in writing the working temporary file (file ended by .tmp.9999
+where 9999 is a number) because of permissions problems.<br>
+First check that the directory <i>/workingpath</i> has "Write" permission for<br>
+user <u>nobody</u> (default user used by Apache on Linux systems)<br>
+or user <u>IUSR_<i>SERVERNAME</i></u> (default used user by IIS on NT).<br>
+With Unix, try with a path with no links.<br>
+With NT, you must check NTFS permissions ("Read/Write/Modify"), if your directory is on a NTFS partition.<br>
+With IIS, there is also a "Write" permission attribute, defined in directory properties
+in your IIS setup, that you must check.<br>
+With IIS, if a default cgi-bin directory was created during IIS install, try to
+put AWStats directly into this directory.<br>
+If this still fails, you can change the DirData parameter to say AWStats
+that you want to use another directory (A directory you are sure that the default
+user, used by web server process, can write into).<br>
+<br>
+
+<a name="EMPTY_STATS"></a><br>
+<b><u>FAQ-SET350 : EMPTY OR NULL STATISTICS REPORTED</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+AWStats seems to work but I'm not getting any results. i get a statistics page that looks like i have no hits.<br>
+<font class=CSolution>SOLUTION:</font><br>
+That's the one of the most common problem you can have and reason is simple: Your log file format setup is wrong.<br>
+<u>If you use Apache web server</u><br>
+The best way of working is to use the <i>"combined"</i> log format (See the <a href="awstats_setup.html">Setup and Use</a> page
+to know the way to change your Apache server log from <i>"common"</i> log format into <i>"combined"</i>).
+Don't forget to stop Apache, reset your log file and restart Apache to make change into combined
+effective. Then you must setup your AWStats config file with value <a href="awstats_config.html#LogFormat">LogFormat</a>=1.<br>
+If you want to use another format, read the next FAQ to have examples of LogFile value according
+to log files format.<br>
+<u>If you use IIS server or Windows built-in web server</u><br>
+The Internet Information Server default W3C Extended Log Format will not work correctly with AWStats.
+To make it work correctly, start the IIS Snap-in, select the web site and look at it's Properties.
+Choose W3C Extended Log Format, then Properties, then the Tab Extended Properties and uncheck everything
+under Extended Properties. Once they are all unchecked, check off the list given in
+the <a href="awstats_setup.html">Setup and Use</a> page ("With IIS Server" chapter).<br>
+You can also read the next FAQ to have examples of <a href="awstats_config.html#LogFormat">LogFormat</a> value according to log files format.<br>
+<br>
+
+<a name="REDIRECT"></a><br>
+<b><u>FAQ-SET400 : PIPE REDIRECTION TO A FILE GIVE ME AN EMPTY FILE</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I want to redirect awstats.pl output to a file with the following command :<br>
+<i>> awstats.pl -config=... [other_options] > myfile.html</i><br>
+But myfile.html is empty (size is 0). If i remove the redirection, everythings works correctly.<br>
+<font class=CSolution>SOLUTION:</font><br>
+This is not an AWStats bug but a problem between perl and Windows.<br>
+You can easily solve this running the following command instead:<br>
+<i>> perl awstats.pl -config=... [other_options] > myfile.html</i><br>
+<br>
+
+<a name="NO_ICON"></a><br>
+<b><u>FAQ-SET450 : NO PICTURES/GRAPHICS SHOWN</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+AWStats seems to work (all data and counters seem to be good) but I have no image shown.<br>
+<font class=CSolution>SOLUTION:</font><br>
+With Apache web server, you might have troubles (no picture shown on stats page) if you use a directory called "icons" (because of Apache
+pre-defined "icons" alias directory), so use instead, for example, a directory called "icon" with
+no s at the end (Rename your directory physically and change the <a href="awstats_config.html#DirIcons">DirIcons</a> parameter in config file
+to reflect this change).<br>
+<br>
+
+<a name="ROTATE"></a><br>
+<b><u>FAQ-SET500 : HOW TO ROTATE MY LOGS WITHOUT LOOSING DATA</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I want to archive/rotate my logs using my web server system options or a third software (rotatelog,
+cronolog) but don't want to loose any visits information during the rotate process.<br>
+<font class=CSolution>SOLUTION:</font><br>
+If you use a rotate system (internal web server feature or third software), this means you probably not use
+AWStats <a href="awstats_config.html#PurgeLogFile">PurgeLogFile</a> nor <a href="awstats_config.html#ArchiveLogRecords">ArchiveLogRecords</a> parameter.<br>
+* If your config file is setup to process current log file (because you want to use the <a href="awstats_config.html#AllowToUpdateStatsFromBrowser">AllowToUpdateStatsFromBrowser</a>
+option), if you don't want to loose any records during the rotate process, you can just run the AWStats update process
+on the archived log file just after the update process using the -logfile option (This will avoid you to change the config file).<br>
+* If you choose (for security reason, to avoid CPU abuse on large web site or other) to make updates by your scheduler only on archive files, this means
+you don't use the <a href="awstats_config.html#AllowToUpdateStatsFromBrowser">AllowToUpdateStatsFromBrowser</a> "real-time" feature of AWStats.
+In this case all you have to do is to run the update process just after the rotate was done using a config/domain file configured to
+process the archived log files (using date tags of <a href="awstats_config.html#LogFile">LogFile</a> for examples).<br>
+Note: For Apache users, use of <a href="http://cronolog.org" target=awstatsbis>cronolog</a> seems to be a better choice
+than rotatelog (cronolog is available for Unix/Linux and Windows and is more flexible).<br>
+To use cronolog or rotatelog you must setup your web server log file name using a pipe like this example:<br>
+<i>CustomLog "|/usr/sbin/cronolog [cronolog_options] /var/logs/access.%Y%m%d.log" combined</i><br>
+<br>
+
+
+
+<a name="CRONTAB"></a><br>
+<b><u>FAQ-SET550 : HOW TO RUN AWSTATS FREQUENTLY</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+AWStats must be ran frequently to update statistics. How can I do this ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+<br>
+<u>With Windows</u>, you can use the internal task scheduler.
+The use of this tool is not an AWStats related problem, so please take a look at your Windows manual.
+Warning, if you use <i>"awstats.pl -config=mysite -update"</i> in your scheduled task, you might
+experience problem of failing task. Try this instead<br>
+<i>"C:\WINNT\system32\CMD.EXE /C C:\[awstats_path]\awstats.pl -config=mysite -update"</i><br>
+or<br>
+<i>"C:\[perl_path]\perl.exe C:\[awstats_path]\awstats.pl -config=mysite -update"</i><br>
+A lot of other scheduler (sharewares/freewares) are very good.<br>
+<br>
+<u>With unix-like operating systems</u>, you can use the "<b>crontab</b>".<br>
+This is examples of lines you can add in the cron file (see your unix reference manual for cron) :<br>
+To run update every day at 04:00, use :<br>
+<i>0 4 * * * /opt/awstats/wwwroot/cgi-bin/awstats.pl -config=mysite -update</i><br>
+To run update every hour, use :<br>
+<i>0 * * * * /opt/awstats/wwwroot/cgi-bin/awstats.pl -config=mysite -update</i><br>
+<br>
+
+<a name="EXCLUDEHOSTS"></a><br>
+<b><u>FAQ-SET600 : HOW CAN I EXCLUDE MY IP ADDRESS (OR WHOLE SUBNET MASK) FROM STATS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I don't want to see my own IP address in the stats or I want to exclude counting visits from a whole subnet.<br>
+<font class=CSolution>SOLUTION:</font><br>
+You must edit the config file to change the <a href="awstats_config.html#SkipHosts">SkipHosts</a> parameter.<br>
+For example, to exclude:<br>
+- your own IP address 123.123.123.123, use <a href="awstats_config.html#SkipHosts">SkipHosts</a>="123.123.123.123"<br>
+- the whole subnet 123.123.123.xxx, use <a href="awstats_config.html#SkipHosts">SkipHosts</a>="123.123.123"<br>
+- all sub hosts xxx.myintranet.com, use <a href="awstats_config.html#SkipHosts">SkipHosts</a>=".myintranet.com" (This one works only if DNS lookup is already done in your
+log file).<br>
+<br>
+
+
+<hr><br>
+
+
+<a name="SPEED"></a><br>
+<b><u>FAQ-COM100 : AWSTATS SPEED/TIMEOUT PROBLEMS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+When I analyze large log files, processing times are very important (Update process from a browser
+returns a timeout/internal error after a long wait).
+Is there a setup or things to do to avoid this and increase speed ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+You really need to understand how a log analyzer works to have good speed.
+There is also major setup changes you can do to decrease your processing time.<br>
+- Launch AWStats more often (from crontab or a scheduler). More often you launch
+AWStats, more faster is AWStats (because the less is the number of NEW lines in
+log, since last run, to process). See the <a href="awstats_benchmark.html">Benchmark page</a> to
+get examples of launching frequency according to your web traffic<br>
+- You can disable <a href="awstats_config.html#DNSLookup">DNSLookup</a> in configure file (set <i>DNSLookup=0</i>)
+but this requires that hosts addresses in your log file are already resolved (need to setup your web server to do so) or that
+you don't need the domain/country report.
+Log analyze speed can be increased by 2 to 50 times but your web server will be slowed.<br>
+If you don't understand what is an "already resolved reverse DNS lookup", keep
+this parameter to 1.<br>
+- If you use Apache, set <a href="awstats_config.html#PurgeLogFile">PurgeLogFile</a> to 1 (By default, to avoid bad surprise,
+<i>PurgeLogFile</i> is 0 in configure file, but you can set it to 1 to ask AWStats
+to purge the log file after processing it. This increase speed for next run).<br>
+- Use last AWStats version.<br>
+<br>
+
+<a name="BENCHMARK"></a><br>
+<b><u>FAQ-COM150 : BENCHMARK / FREQUENCY TO LAUNCH AWSTATS TO UPDATE STATISTICS</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+What is AWStats speed ?<br>
+<font class=CProblem>PROBLEM:</font><br>
+What is the frequency to launch AWStats process to update my statistics ?<br>
+<font class=CSolution>SOLUTION:</font>
+All benchmarks information and advice on frequency for update process are related into
+the <a href="awstats_benchmark.html">Benchmark page</a>.<br>
+<br>
+
+<a name="DNS"></a><br>
+<b><u>FAQ-COM200 : HOW REVERSE DNS LOOKUP WORKS, UNRESOLVED IP ADDRESSES</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+The reported page AWStats shows me has no hostnames, only IP addresses, countries reported are all "unknown".<br>
+<font class=CSolution>SOLUTION:</font><br>
+When AWStats find an IP address in your log file, it tries a reverse DNS lookup to find
+the hostname and domain if the <a href="awstats_tools.html#DNSLookup">DNSLookup</a> parameter, in your AWStats config file, is <a href="awstats_config.html#DNSLookup">DNSLookup</a>=1
+(Default value). So, first, check if you have the good value. The <a href="awstats_config.html#DNSLookup">DNSLookup</a>=0
+must be used only if your log file contains already resolved IP address. For example,
+when you set up Apache with the <i>HostNameLookups=on</i> directive. When you
+ask your web server to make itself the reverse DNS lookup to log hostname instead
+of IP address, you will still find some IP addresses in your log file because
+the reverse DNS lookup is not always possible. But if your web server fails in
+it, AWStats will also fails (All reverse DNS lookups use the same system API).
+So to avoid AWStats to make an already done lookup (with success or not), you
+can set <a href="awstats_config.html#DNSLookup">DNSLookup</a>=0 in AWStats config file.
+If you prefer, you can make the reverse DNS lookup on a log file before running
+your log analyzer (If you only need to convert a logfile with IP Addresses into a
+logfile with resolved hostnames). You can use for this <a href="awstats_config.html#logresolvemerge">logresolvemerge</a> tool
+provided with AWStats distribution (This tools is an improved version of <i>logresolve</i> provided with Apache).<br>
+<br>
+
+<a name="DIFFERENT_RESULTS"></a><br>
+<b><u>FAQ-COM250 : DIFFERENT RESULTS THAN OTHER ANALYZER</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I also use webalizer (or another log analyzer) and it doesn't report the same results than AWStats. Why ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+If you compare AWStats results with an other log file analyzer, you will found some differences,
+sometimes very important. In fact, all analyzer (even AWStats) make "over reporting" because of the
+problem of proxy-servers and robots. However AWStats is one the most accurate and its "over reporting"
+is very low where all other analyzers, even the most famous, have a very high error rate (10% to 2x more than reality).<br>
+This is the most important reasons why you will find differences:<br>
+- Some dynamic pages generated by CGI programs are not counted by some analyzer (ie Webalizer) like
+a "Page" (but only like a "Hit") if CGI prog has not a .cgi extension, so they are not included
+correctly in their statistics. AWStats does not make this error and all CGI pages are pages.<br>
+- AWStats is the alone analyzer (that i know for the moment) able to detect robots visits.
+All other analyzers think it's a human visitor. This error make them to report more visits and visitors
+than reality. This does not happen with AWStats. When it tells "1 visitor", it means "1 human visitor".
+All robots hits are reported in the "Robots/Spiders visitors" chart.<br>
+- A lot of analyzer (ie webalizer) use the "Hits" to count visitors. This is not a good way of working :
+Some visitors use a lot of proxy servers to surf (ie: AOL users), this means it's possible that several
+hosts (with several IP addresses) are used to reach your site for only one visitor (ie: one proxy server download
+the page and 2 other servers download all images). Because of this, if stats of unique visitors are made on "hits",
+3 users are reported but it's wrong. So AWStats, like HitBox, considers only HTML "Pages" to count unique visitors.
+This decrease the error, not completely, because it's always possible that a proxy server download one HTML frame and
+another one download another frame, but this make the over-reporting of unique visitors less important.<br>
+There is also differences in log analyzers databases and algorithms that make details of results less or more accurate:<br>
+- AWStats has a larger browser, os and search engine database, so reports concerning this are more accurate.<br>
+- AWStats has url syntax rules to find keywords or keyphrases used to find your site, but AWStats has also
+an algorithm to detect keywords of unknown search engines with unknown url syntax rule.<br>
+<br>
+
+<a name="DIFFERENCE_HOURS"></a><br>
+<b><u>FAQ-COM300 : DIFFERENCE BETWEEN LOCAL HOURS AND AWSTATS REPORTED HOURS</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I use IIS and there's a difference between local hour and AWStats reported hour. For example I made a hit on a page
+at 4:00 and AWStats report I hit it at 2:00.<br>
+<font class=CSolution>SOLUTION:</font><br>
+This is not a problem of time in your local client host.
+AWStats use only time reported in logs by your server
+and all time are related to server hour. The problem is that IIS in some foreign
+versions puts GMT time in its log file (and not local time). So, you have also
+GMT time in your statistics.<br>
+You can do nothing, for the moment, but waiting that Microsoft change this in next
+IIS versions. However, Microsoft sheet Q271196 "IIS Log File Entries
+Have the Incorrect Date and Time Stamp" says: <br>
+<i>The selected log file format is the W3C Extended Log File
+Format. The extended log file format is defined in the W3C
+Working Draft WD-logfile-960323 specification by Phillip
+M. Hallam-Baker and Brian Behlendorf. This document defines
+the Date and Time files to always be in GMT. This behavior
+is by design.</i><br>
+So this means this way of working might never be changed.<br>
+<br>
+
+<a name="OLDLOG"></a><br>
+<b><u>FAQ-COM350 : HOW CAN I PROCESS OLD LOG FILE ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I want to process an old log file to include its data in my AWStats reports.<br>
+<font class=CSolution>SOLUTION:</font><br>
+You must change your <a href="awstats_config.html#LogFile">LogFile</a> parameter to point to the old log file and run
+the update (or use the -logfile option on command line to overwrite <a href="awstats_config.html#LogFile">LogFile</a> parameter).
+The update process can only accept files in chronological order, so if you have already processed a recent file,
+you must before reset all your statistics (see next FAQ) and restart all the update process for all past log files
+and in chronological order.<br>
+<br>
+
+<a name="MULTILOG"></a><br>
+<b><u>FAQ-COM400 : HOW CAN I UPDATE MY STATISTICS WHEN I USE A LOAD BALANCING SYSTEM THAT SPLITS MY LOGS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+How can I update my statistics when i use a load balancing system that split my logs ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+The best solution is to merge all split log files resulted from all your load balanced servers into one. For this, you can use
+the <a href="awstats_config.html#logresolvemerge">logresolvemerge</a> tool provided with AWStats :<br>
+<i>logresolvemerge.pl file1.log file2.log ... filen.log > newfiletoprocess.log</i><br>
+And setup the <a href="awstats_config.html#LogFile">LogFile</a> parameter in your config file to process the <i>newfiletoprocess.log</i> file or use
+the <i>-logfile</i> command line option to overwrite <a href="awstats_config.html#LogFile">LogFile</a> value.<br>
+<br>
+
+<a name="RESET"></a><br>
+<b><u>FAQ-COM500 : HOW CAN I RESET ALL MY STATISTICS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I want to reset all my statistics and restart my stats from now.<br>
+<font class=CSolution>SOLUTION:</font><br>
+All analyzed data are stored by AWStats in files called <i>awstatsMMYYYY.[site.]txt</i> (one file each month).
+You will find those files in directory defined by <a href="awstats_config.html#DirData">DirData</a> parameter (same directory than awstats.pl by default).<br>
+To reset your stats for a month, you just have to delete the file for the required month/year.<br>
+To reset all your stats, delete all files awstats*.txt<br>
+Warning, if you delete those data files, you won't be able to recover your stats back, unless you kept old log files somewhere.
+You will have to process all past log files (in chronological order) to get old statistics back.<br>
+<br>
+
+<a name="EDITHISTORY"></a><br>
+<b><u>FAQ-COM550 : CAN I SAFELY REMOVE A LINE IN HISTORY FILES (awstatsMMYYYY*.txt) ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+After processing a log file I want to change my statistics
+without running AWStats update process but changing directly data in AWStats historical database files.<br>
+<font class=CSolution>SOLUTION:</font><br>
+If you remove a lines starting with "BEGIN_" or "END_", AWStats will find your file "corrupted" so you must not change those
+kind of lines. All lines that are not in any "section" (between a BEGIN_xxx and END_xxx line) should also not be removed.
+However you can change any line that is a "section record", but you do this at your own risk. Your reported stats
+might have wrong values after that.<br>
+<br>
+
+<hr><br>
+
+<a name="CSSATTACK"></a><br>
+<b><u>FAQ-SEC100 : CAN AWSTATS BE USED TO MAKE CROSS SITE SCRIPTING ATTACKS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+If a bad user use a browser to make a hit on an URL that include a < SCRIPT > ... < /SCRIPT >
+section in its parameter, when AWStats will show the links on the report page, does the script will be executed ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+No. AWStats use a filter to remove all scripts codes that was included in an URL to make a Cross Site Scripting Attack using a
+log analyzer report page.<br>
+<br>
+
+<a name="SECUSER"></a><br>
+<b><u>FAQ-SEC150 : HOW CAN I PREVENT SOME USERS TO SEE STATISTICS OF OTHER USERS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+I don't want a user xxx (having a site www.xxx.com) to see statistics of user yyy (having
+a site www.yyy.com). How can i setup AWStats for this ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+Take a look at the <a href="awstats_security.html">security page</a>.<br>
+<br>
+
+<a name="WORMS"></a><br>
+<b><u>FAQ-SEC200 : HOW TO MANAGE LOG FILES (AND STATISTICS) CORRUPTED BY 'CODE RED VIRUS LIKE' ATTACKS ?</u></b><br>
+<font class=CProblem>PROBLEM:</font><br>
+My site is attacked by some Code Red Viruses. This make my log file corrupted
+and full of 404 errors. So my statistics are also full of 404 errors. This make AWStats slower and my history files very large.
+Can I do something to avoid this ?<br>
+<font class=CSolution>SOLUTION:</font><br>
+Yes.<br>
+'Code Red virus like' attacks are infected browsers or robots that make hits on your site using a very long unknown URL
+like this one (hoping your server is IIS):<br>
+<i>/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%40%50...%40%50</i><br>
+URL is generated by the infected robot and the purpose is to exploit a vulnerability of the web server (only IIS is concerned by Code Red worm).
+So you will often find a 'common string' in those URLs. For example, with Code Red worm, there is always default.ida in the URL string.
+So, you should edit your config file to add in the <a href="awstats_config.html#SkipFiles">SkipFiles</a> parameter the following value:<br>
+<i>SkipFiles="default.ida"</i><br>
+<br>
+
+
+<hr>
+<script language="javascript">
+ var lastmod = new Date(document.lastModified);
+ if (lastmod.getDate() > 0) {
+ if (lastmod.getDate()<10) zerod="0"
+ else zerod="";
+ if (lastmod.getMonth()<9) zerom="0"
+ else zerom=""
+ year2kok=lastmod.getYear();
+ if (year2kok<100) year2kok+=2000;
+ if ((year2kok>=100) && (year2kok < 1970)) year2kok+=1900;
+ document.writeln("Last revision: "+year2kok+"-"+zerom+(lastmod.getMonth()+1)+"-"+zerod+lastmod.getDate());
+ }
+</script>
+
+</body>
+</html>
projects / thirdparty / AWStats.git / commitdiff
