[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Webalizer 2.01 stats skewed by Code Red
- Subject: Re: [cobalt-users] Webalizer 2.01 stats skewed by Code Red
- From: "Steve Werby" <steve-lists@xxxxxxxxxxxx>
- Date: Sat Aug 11 08:11:14 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
"MikeM" <MyRaQ@xxxxxxxxx> wrote:
> I inserted the following line in my /etc/webalizer.conf file to
> have webalizer ignore the hits from Microsoft's Code Red fiasco:
>
> IgnoreAgent -
>
> Yes, that is a single "hyphen" after the tab. The Code Red
> worm uses the hyphen as its agent name.
In case a User Agent of "-" is used by others not related you might want to
consider the IgnoreURL keyword instead.
'IgnoreURL default.ida' should accomplish the same thing. Which you use
really depends on which you believe is more likely to result in false
positives.
--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/