Return-Path: Delivered-To: apmail-httpd-modules-dev-archive@minotaur.apache.org Received: (qmail 29702 invoked from network); 29 Nov 2010 16:20:08 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 29 Nov 2010 16:20:08 -0000 Received: (qmail 25449 invoked by uid 500); 29 Nov 2010 16:20:08 -0000 Delivered-To: apmail-httpd-modules-dev-archive@httpd.apache.org Received: (qmail 25205 invoked by uid 500); 29 Nov 2010 16:20:06 -0000 Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: modules-dev@httpd.apache.org Delivered-To: mailing list modules-dev@httpd.apache.org Received: (qmail 25178 invoked by uid 99); 29 Nov 2010 16:20:05 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Nov 2010 16:20:04 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of support@bettercgi.com designates 216.17.105.202 as permitted sender) Received: from [216.17.105.202] (HELO ps536.phatservers.com) (216.17.105.202) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Nov 2010 16:19:57 +0000 Received: from r74-192-2-154.bcstcmta01.clsttx.tl.dh.suddenlink.net ([74.192.2.154] helo=raydesk1.bettercgi.com) by ps536.phatservers.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.66) (envelope-from ) id 1PN6Rz-0001cU-7W for modules-dev@httpd.apache.org; Mon, 29 Nov 2010 08:19:35 -0800 Date: Mon, 29 Nov 2010 10:19:34 -0600 From: Ray Morris Subject: Re: Apache log modules To: modules-dev@httpd.apache.org In-Reply-To: <20101129025152.GA27782@seid-online.de> (from rm@tuxteam.de on Sun Nov 28 20:51:52 2010) X-Mailer: Balsa 2.4.1 Message-Id: <1291047574.1076.30@raydesk1.bettercgi.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; DelSp=Yes; Format=Flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable X-Virus-Checked: Checked by ClamAV on apache.org > > My assumption is that both client and server have KeepAlive enabled. > > In that case, should there "generally" not be just one connection > > only? >=20 > This assumption is most likely wrong. Even with keep-alive browsers =20 > will > open more than one connection. After all, keep-alive and multi-connect > solve different problems. Indeed in MOST cases there will be several connections - IE and Firefox open multiple connections. Without knowing the actual purpose, the problem you're trying to solve, the best course may be a module which logs and increments a cookie, combined with sorting by IP + time. One could also say that anything with a mime type of text/html and a status code other than 302 is a page, with mime types like image/* being elements of that page coming from the same click. That's how we organize a certain report - html is a page, images, css, etc. are assumed to be elments within that page. Very often, though, I've found that when one discovers that it will be difficult or impossible to proceed in the manner planned, the best course of action is often to go back one step in the problem solving process. That is, to ask oneself "if I can't identify which hits come from a single click, how else can I __________?", filling in the blank with whatever you're really trying to accomplish. -- Ray Morris support@bettercgi.com Strongbox - The next generation in site security: http://www.bettercgi.com/strongbox/ Throttlebox - Intelligent Bandwidth Control http://www.bettercgi.com/throttlebox/ Strongbox / Throttlebox affiliate program: http://www.bettercgi.com/affiliates/user/register.php