Raw Statistic Logs

Raw Log Contents

A raw log is a record of all the requests for individual files that visitors have requested from a web site. Individual files include the HTML files, their imbedded graphic images and any other associated files that get transmitted to the visitor's computer. The log can be analyzed by a log analysis program, like Analog (which is included with your Tivilon account) or WebTrends.

In general, a log file can be analyzed to tell you:
  • The number of visitors (unique first-time requests) to a web site (and particular pages)
  • The origin of the visitors in terms of their associated server's domain name (for example, visitors from .edu, .com, and .gov sites and from the online services)
  • How many requests for each page at the site, which can be presented with the pages with most requests listed first
  • Usage patterns in terms of time of day, day of week, and seasonally.

Accessing Your Raw Logs

To access your raw log files, you'll need to FTP into your web site. Once logged in, go into the /logs directory, then go into the W3SVC# directory. Once in there, you can download the raw log files to your PC for viewing. (If you are running your logs through your own analysis program, you'll need to download the log files to your PC before doing so).


An Example

Here's what an entry from a raw log file looks like:

2001-09-17 12:34:56 216.35.116.123 - 192.168.1.150 80 GET /index.asp - 200 1385 tivilon.com Mozilla/3.0+

We'll break it down for you, as follows:

Server Date/Time: 2001-09-17 12:34:56
This will be the time the server receives the request. On Tivilon's servers, it will be in Eastern Time, which is 4 hours earlier than Greenwich Mean Time.

User's IP Address: 216.35.116.123
This is the IP address that the user is accessing the Internet from. If the user is dialing up to the Internet, this would be an IP address randomly assigned by their ISP. If on a LAN, this IP may be a static IP housed on the LAN.

Internal IP Address: 192.168.1.150
This is the IP address of the server that is prossesing the request from the user. This IP resides on the Tivilon network.

Port Number: 80
A port number is a way to identify a specific process to which an Internet or other network message is to be forwarded when it arrives at a server. Port 80 is the one you'll most often see here, as it represents HTTP processes.

Request Method: GET
The most common are "GET" and "POST." GET receives information, while POST sends information.

Requested File: /index.asp
This is the file that the server was asked to transmit. It can be any file type, and can be requested by these methods:
  • A person typing the URL into their browser
  • A file called by a HTML file for inline display
  • A script file that runs on the server, but does not appear in the display
  • A search engine indexing a site, calling upon links from another page
Server Result Code: 200
After the server receives the request, it prints a code for the result, (i.e. whether the file was served to the client, or if not, why). The most common entry will be 200, a successful transmission. We have a listing of server result codes available on our web site.

Bytes Transmitted: 1385
This is not necessarily the actual file size, but the amount of data, in bytes, which the server transferred. Some things which will create an entry less than the total file size are:
  • The visitor hits the Stop button. (They will do this when they have to wait too long).
  • The visitor clicks on another link before the page has completely loaded.
  • The connection is broken due to a bad connection.
Domain Name Requested: tivilon.com
This is the domain that houses the requested file.

User's Browser: Mozilla/3.0+
This information is useful if you are incorporating browser-specific features into your site, wondering whether to add foreign languages, or just wondering what people are using. Currently, the most commonly used browsers are Netscape and MS Internet Explorer. Netscape will appear in the log as "Mozilla." Internet Explorer will appear as MSIE, although the word Mozilla will also appear in the entry. Here are a few examples:

"Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)"
"Mozilla/2.0 (Compatible; AOL-IWENG 3.0; Win16)"
"Mozilla/2.0 (compatible; AOL 3.0; Mac_PowerPC)"
"Mozilla/2.0 (compatible; MSIE 3.01; Windows 95)"
"Mozilla/4.01 [en] (WinNT; I)"
"Mozilla/3.01-C-MACOS8 (Macintosh; I; PPC)"
"Mozilla/2.0 (compatible; MSIE 3.02; Windows 95)"
"Mozilla/2.0 (compatible; MSIE 2.1; AOL 3.0; Mac_PPC)"
"Mozilla/3.01 (X11; I; IRIX 5.3 IP22)"
"Mozilla/3.01C (X11; I; HP-UX B.10.20 9000/715)"
"Mozilla/3.01 (X11; U; SunOS 5.5.1 sun4m)"

Phone: 1-866-TIVILON    Fax: 1-877-232-9848    E-mail: Copyright © - Tivilon, Inc. - Legal/Privacy Notices
Tivilon, a Baltimore web host, offers Baltimore web design, custom web applicationscorporate identity design for business, & more.