Webalizer Quick Help

From: Subject: Webalizer Quick Help Date: Fri, 13 Apr 2007 01:19:03 -0500 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Location: http://www.mrunix.net/webalizer/webalizer_help.html X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 Webalizer Quick Help Webalizer=20 Quick Help

Main Headings
Hits represent the = total=20 number of requests made to the server during the given time period = (month,=20 day, hour etc..).
Files represent = the total=20 number of hits (requests) that actually resulted in something being = sent back=20 to the user. Not all hits will send data, such as 404-Not Found = requests and=20 requests for pages that are already in the browsers cache.
Tip: By looking at the difference between hits and files, = you can=20 get a rough indication of repeat visitors, as the greater the = difference=20 between the two, the more people are requesting pages they already = have cached=20 (have viewed already).
Sites is the = number of=20 unique IP addresses/hostnames that made requests to the server. Care = should be=20 taken when using this metric for anything other than that. Many users = can=20 appear to come from a single site, and they can also appear to come = from many=20 ip addresses so it should be used simply as a rough guage as to the = number of=20 visitors to your server.
Visits occur = when some=20 remote site makes a request for a page on your server for the = first=20 time. As long as the same site keeps making requests within a given = timeout=20 period, they will all be considered part of the same Visit. If = the site=20 makes a request to your server, and the length of time since the last = request=20 is greater than the specified timeout period (default is 30 = minutes), a=20 new Visit is started and counted, and the sequence repeats. = Since only=20 pages will trigger a visit, remotes sites that link to graphic = and=20 other non- page URLs will not be counted in the visit totals, reducing = the=20 number of false visits.
Pages are those = URLs that=20 would be considered the actual page being requested, and not all of = the=20 individual items that make it up (such as graphics and audio clips). = Some=20 people call this metric page views or page impressions, = and=20 defaults to any URL that has an extension of .htm, .html = or=20 .cgi.
A KByte (KB) is = 1024 bytes (1=20 Kilobyte). Used to show the amount of data that was transfered between = the=20 server and the remote machine, based on the data found in the server = log.
Common Definitions
A Site is a remote machine that makes = requests to your=20 server, and is based on the remote machines IP Address/Hostname.
URL - Uniform Resource Locator. All requests = made to a=20 web server need to request something. A URL is that = something,=20 and represents an object somewhere on your server, that is accessable = to the=20 remote user, or results in an error (ie: 404 - Not found). URLs can be = of any=20 type (HTML, Audio, Graphics, etc...).
Referrers are those URLs that lead a user = to your=20 site or caused the browser to request something from your server. The = vast=20 majority of requests are made from your own URLs, since most HTML = pages=20 contain links to other objects such as graphics files. If one of your = HTML=20 pages contains links to 10 graphic images, then each request for the = HTML page=20 will produce 10 more hits with the referrer specified as the URL of = your own=20 HTML page.
Search Strings are obtained from examining = the=20 referrer string and looking for known patterns from various search = engines.=20 The search engines and the patterns to look for can be specified by = the user=20 within a configuration file. The default will catch most of the major = ones.
Note: Only available if that information is contained in the = server=20 logs.
User Agents are a fancy name for = browsers.=20 Netscape, Opera, Konqueror, etc.. are all User Agents, and each = reports=20 itself in a unique way to your server. Keep in mind however, that many = browsers allow the user to change it's reported name, so you = might see=20 some obvious fake names in the listing.
Note: Only available if that information is contained in the = server=20 logs.
Entry/Exit pages are those pages that = were the=20 first requested in a visit (Entry), and the last requested=20 (Exit). These pages are calculated using the Visits = logic above.=20 When a visit is first triggered, the requested page is counted as an=20 Entry page, and whatever the last requested URL was, is counted = as an=20 Exit page.
Countries are determined based on the = top level=20 domain of the requesting site. This is somewhat questionable = however, as=20 there is no longer strong enforcement of domains as there was in the = past. A=20 .COM domain may reside in the US, or somewhere else. An .IL domain may = actually be in Isreal, however it may also be located in the US or = elsewhere.=20 The most common domains seen are .COM (US Commercial), .NET (Network), = .ORG=20 (Non-profit Organization) and .EDU (Educational). A large percentage = may also=20 be shown as Unresolved/Unknown, as a fairly large percentage of = dialup=20 and other customer access points do not resolve to a name and are left = as an=20 IP address.
Response Codes are defined as part of the = HTTP/1.1=20 protocol (RFC=20 2068; See Chapter 10). These codes are generated by the web server = and=20 indicate the completion status of each request made to it.