Hi,
i changed my logparser.pl to extract only the root domain.
See the result in the attached image.
$user=lc $Luser;
$user = Ip2Name($Lhost,$user,$Ltimestamp);
next if (defined $hSkipUser{$user});
#simplified some common banner system & counters
$url=$Lurl;
if ($url =~ /([^:]*:\/\/)?([^\/]*\.)*([^\/\.]+\.[^\/]+)/g) {
($site)= split /:/,$3;
} else {
$site=$Lurl;
}
$site=$Lurl if ($site eq "");
$totalsize {$user} +=$Lsize;
$totalhit {$user} ++;
br
Lars
[image: log.jpg]
[image: log.jpg_thumb]