[cobalt-users] Webalizer 2.01 stats skewed by Code Red

["MikeM" <MyRaQ@xxxxxxxxx>]

I inserted the following line in my /etc/webalizer.conf file to have webalizer ignore the hits from Microsoft's Code Red fiasco:

	IgnoreAgent		-

Yes, that is a single "hyphen" after the tab.  The Code Red worm uses the hyphen as its agent name.

There are some caveats before you go adding this line in your webalizer config file.

- I have no idea how this affects webalizer processing if you have enabled incremental processing of your log files.  

- I had to remove the webalizer.current and webalizer.hist files in my stats directories before I saw the results of the config file change.

- and most important of all: try this change in a test environment before you make it on any of your production systems.

Good luck!