Hi there I know searching for something like this is very difficult, but I would like to put forward the start of script that will try in some way to detect some SQL injection attempts. This is based on reading papers on SQL Injection and extracts from detected attemps within my logs Not having any POST...

You only choice is to list each referer out in the where clause. You do have a choice of how to do this: where (not cs(referer) like 'http://www.google.com/%') and (not cs(referer) like 'http://by107fd.bay.107.hotmail.com/%') and ... or where (not to_lowercase(extract_token(cs(referer),2,'/')) in ('www...

Thanks so much for your response. I already tried to find your example but i did not find the one that cover my needs in this case. I am attaching a log example to be more clear in my doubts. If you see into the example log, you will find some referer that start with http:\\bancoplex.com.... ,another...

You can't use the CSV list of referrers to filter because LP doesn't support subqueries against a different input format than the main query. If you really don't want to have a static list of long OR referer LIKE ... clauses in your query, the easiest thing I can think of would be to use a meta-query...

I'm just listening here, cause i would like to know if that would work as well. So you mean you would have a file containing the referrer URLs u want to parse? //jot

I am using the Log Parser to investigate data into my log file.I need your help to undestand the best way to supress differents rows into the IISW3C log file. I have several cs(referer) that I need to supress from my output file. I know that I can use "not like" but it is only work for one condition...

I solved my problem by my self with this query: LogParser -i:IISW3C "SELECT yearMonth AS Dato, DIV(SUM(sc-bytes), 1024000) AS TotalSentMB, DIV(SUM(cs-bytes), 1024000) AS TotalReceivedMB USING TO_STRING(date, 'yyyy-MM') as yearMonth INTO D:\Ouput.txt FROM D:\Logtest\*.log GROUP BY yearMonth" -o:nat

[QUOTE User="LogParser User : TPJ"]Quote: Normally you'd use QUANTIZE, but since the amount of time in a month varies, you'll have to use text processing: SELECT yearMonth AS Dato, SUM(sc-bytes) AS Sent, SUM(cs-bytes) AS Receiv...[/QUOTE] Thank you, it worked as i wanted it to do. Is it possible to divide...

Normally you'd use QUANTIZE, but since the amount of time in a month varies, you'll have to use text processing: SELECT yearMonth AS Dato, SUM(sc-bytes) AS Sent, SUM(cs-bytes) AS Received USING TO_STRING(date, 'yyyy-MM') as yearMonth INTO D:\Output.txt FROM D:\Logtest\*.log GROUP BY yearMonth

Hello there, hope that anyond can help me I have this query, actually works fine, but i would like to get the traffic summed up by the month: LogParser -i:IISW3C "SELECT date As Dato, SUM(sc-bytes) As Sent, SUM(cs-bytes) As Received INTO D:\Output.txt FROM D:\Logtest\*.log GROUP BY date" -o:NAT Anybody...