Log: hostname instead of ips

[enotalone]

For some reason my log started to log hostnames instead of most ips. Just noticed this today and not sure how long it has been doing it but a month ago or so last time i took a look into raw logs without urchin it was fine.

Anwy i have my format as

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

HostnameLookups is set to Off

Interesting but while most entries are logged as hostname some are normal just ips.

Thank you.

[jdMorgan]

In this case, it looks like your log_config string is requesting this behaviour by specifying "%u" instead of "%a". In some cases, the reverse-DNS lookup function may time out or be unavailable, so the server reverts to logging the IP address (which is directly accessible in the request itself, and does not need to be looked up by sending a query to the DNS system).

The log format 'decoding key' is given in the Apache mod_log_config documentation [httpd.apache.org].

Jim

[coopster]

Looks like the default

combined

LogFormat [httpd.apache.org] with the Remote host (%h) specified. If you want IP you will have to change your format [httpd.apache.org].

[coopster]

"%u"

, jd, or did you mean

"%h"

?

[jdMorgan]

Yes, sorry. %u is the remote user and %h is remote hostname.

Jim

[enotalone]

Thank you everyone, so it should be?

LogFormat "%a %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

[enotalone]

Thank you everyone, much appreciated

I tried "%a %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined and it seems to do the trick!