Access counter and statistics by DeleGate

Yutaka Sato

May 11, 2006

Basic functionality for access counters and real-time statistics were built-into DeleGate/9.2.0. It is applied not only to access count from clients but also to general counts including Referers, errors, and more, in future. So far, the following counters have been implemented.

count for each requested URL on origin/proxy HTTP DeleGate (example)
count for each Referer URL on origin/proxy HTTP DeleGate (example)
count for each transferred file on origin FTP DeleGate (example)
count for each error or rejection in SMTP DeleGate (example)
count for each session of FTP, SMTP, NNTP DeleGate (example)
count for each packet incoming to DNS DeleGate (example)

This built-in counter is intended to be used to show real-time statistics of DeleGate servers too. It will be convenient to be able to get statistics in real-time and without keeping a large volume of log files.

Basic Usage

Counters are enabled with the COUNTER parameter, as follows in the simplest.

COUNTER=do

A SSI tag "COUNTER" is introduced to show values in counters. The simplest example is the access counter of the SHTML page including the tag.

6392

There are three types of counters based on (client's) IP address; the first one is incremented on every hit, the second one is incremented excluding repetitive hit by the same IP address, and the third one is incremented excluding repetitive hit by one of last ten IP addresses. Each counter is represented with %T, %U, and %V respectively in a format string given by the fmt="formatString" attribute.

6392 : 5761 : 3500 hits / 319 nets (since May 11 2006)

Yet another count is "network count" which is represented as "%N" in the format string. It is introduced to be a metrics of the coverage or distribution of (client's) IP addresses on the address space. It is not a counter incremented on each hit, but the number of bits in a bit map of network addresses. In the current implementation, the width of the network mask is 10 bits, therefore the logical maximum number of "%N" is 1024. The map of networks can be shown with "%M" as follows.


  0.0.0.0 -------- -------- -------- -------- X------- -------- X-XXX--- -------X
 16.0.0.0 -------- -------- -------- -------- XXXX---- -------- -------- --------
 32.0.0.0 -------- -------- -------- -0------ -------X -------X -------- --------
 48.0.0.0 -------- -------- -------- -------- -------- XX-XXXX- X-XXXXX9 XXXX-X-X
 64.0.0.0 XXXX2XXX XXXXXXX4 XXXXXXXX XXX-XXXX XXXX---- 1X-XXXX- XXXX-3XX X---XX--
 80.0.0.0 XXXXXXXX XXXXXXXX XXXXXXXX XX-XXXXX -X6X-XXX --XXXXXX XX-XX-X- -XXX-X--
 96.0.0.0 ---X-X-- ---X--X- -------- -------- -------- -------- -------- --------
112.0.0.0 -------- -------- X----X-X X---X--- ----XXX- X-XX-XX7 XXXXXXXX ----X---
128.0.0.0 -X-XX--- -X-XXX-- ---X-X-X -X-X---- --XX-XX- ---X---- -X--XX-- -X-----X
144.0.0.0 -------- X----XXX ---XX--X X---XX-X --XX---- -------- -----XX- ------X-
160.0.0.0 -------- -X-----X -X--X-XX -------- ---X---- -XX-XXX- -----X-- --X-----
176.0.0.0 -------- -------- -------- -------- -------- -------- ------X- XXX-----
192.0.0.0 XXXXX-XX XXXXXXXX X--X---- --XXXX-X XXXXXXX- XXXXXXXX XXXX---X XXXXXXXX
208.0.0.0 XXXXX-XX -XXXXXXX XXXXXXXX X------- XXXXXXXX XXXXXXXX XXXXXXX8 XXXX----

In the map, each true bit is marked with 'X' while false bit is marked with '-'. The recent ten networks are marked with a digit from '0' to '9'. The recent ten IP addresses can be shown with "%L" as follows.


LAST[0][  0] 2660003E  38.B
LAST[1][  0] 4A000079  74.A
LAST[2][  0] 413000B6  65.A
LAST[3][  0] 4D5000F8  77.B
LAST[4][  0] 43C0006D  67.D
LAST[5][  0] 41300044  65.A
LAST[6][  0] 5880000D  88.C
LAST[7][  0] 7BD00056 123.D
LAST[8][  0] DDD000F3 221.D
LAST[9][  0] 3DC0000E  61.D

This table of recent 10 addresses is managed in the LRU order, that is the entry of the least recentry hit is pushed out from the table.

Hits 6392 : 0.2/hour, 5.6/day, 172.3/month

PageViews: 5,761 hits / 319 nets
[ The source of this SHTML file (1184 hits) ]