Access counter and statistics by DeleGate

Yutaka Sato

May 11, 2006

Basic functionality for access counters and real-time statistics were built-into DeleGate/9.2.0. It is applied not only to access count from clients but also to general counts including Referers, errors, and more, in future. So far, the following counters have been implemented.

count for each requested URL on origin/proxy HTTP DeleGate (example)
count for each Referer URL on origin/proxy HTTP DeleGate (example)
count for each transferred file on origin FTP DeleGate (example)
count for each error or rejection in SMTP DeleGate (example)
count for each session of FTP, SMTP, NNTP DeleGate (example)
count for each packet incoming to DNS DeleGate (example)

This built-in counter is intended to be used to show real-time statistics of DeleGate servers too. It will be convenient to be able to get statistics in real-time and without keeping a large volume of log files.

Basic Usage

Counters are enabled with the COUNTER parameter, as follows in the simplest.

COUNTER=do

A SSI tag "COUNTER" is introduced to show values in counters. The simplest example is the access counter of the SHTML page including the tag.

8389

There are three types of counters based on (client's) IP address; the first one is incremented on every hit, the second one is incremented excluding repetitive hit by the same IP address, and the third one is incremented excluding repetitive hit by one of last ten IP addresses. Each counter is represented with %T, %U, and %V respectively in a format string given by the fmt="formatString" attribute.

8389 : 7564 : 4721 hits / 343 nets (since May 11 2006)

Yet another count is "network count" which is represented as "%N" in the format string. It is introduced to be a metrics of the coverage or distribution of (client's) IP addresses on the address space. It is not a counter incremented on each hit, but the number of bits in a bit map of network addresses. In the current implementation, the width of the network mask is 10 bits, therefore the logical maximum number of "%N" is 1024. The map of networks can be shown with "%M" as follows.


  0.0.0.0 -------- -------- -X------ -------- X------- -------- X-XXX--- -------X
 16.0.0.0 -------- -------- -------- -------- XXXX---- -------- -------- --------
 32.0.0.0 -------- -------- -------- -0------ -------X -------X -------- --------
 48.0.0.0 -------- -------- -------- -------- -------- XX-XXXX- X-XXXXXX XXXX-X-X
 64.0.0.0 XXXXXXXX XXXXXXX1 XXXXXXXX XXX-XXXX XXXX---- XX-XXXX- XXXXXXXX X---XX--
 80.0.0.0 XXXXXXXX XXXXXXXX XXXXXXXX XX-XXXX4 -XXX-X9X --XXXXXX XX-XX-X- -XXX-X--
 96.0.0.0 ---X-X-- -X-X--X- -------- -------- -------- -------- -------- -X5X----
112.0.0.0 -------- --X---X- X----X-X X---X--X --X-XXXX XXXXXXXX XXXXXXXX ----X---
128.0.0.0 -X-XX--- -X-XXX-- ---X-X-X -X-X---- --XX-XXX ---X---- -X--XX-- -X-----X
144.0.0.0 -------- X---XXXX ---XX--X X---XX-X --XX---- -------- -----XX- ------X-
160.0.0.0 -------- -X-----X -X--X-XX -------- ---X---- -XX-XXX- -----X-X XXX-----
176.0.0.0 -------- -------- ---X---- -----X-- -X------ -------- X-----X- XXX-----
192.0.0.0 XXXXX-XX XXXXXXXX X--X---- X-XXXX-X XXXXXXX- XXXXXXXX XXXX---X XXXX3XXX
208.0.0.0 XXXXXXXX -XXXXXXX 2XXXXXXX X------- XXXXXXXX XXXXXXXX XXXXXXXX XXXX----

In the map, each true bit is marked with 'X' while false bit is marked with '-'. The recent ten networks are marked with a digit from '0' to '9'. The recent ten IP addresses can be shown with "%L" as follows.


LAST[0][  0] 2660005C  38.B
LAST[1][ 10] 43C000D7  67.D
LAST[2][  0] D4200048 212.A
LAST[3][  0] CF200085 207.A
LAST[4][  1] 57F000F0  87.D
LAST[5][  1] 6EA0006B 110.C
LAST[6][  0] CF2000E8 207.A
LAST[7][  0] CF200056 207.A
LAST[8][  0] CF200069 207.A
LAST[9][  0] 599000F0  89.C

This table of recent 10 addresses is managed in the LRU order, that is the entry of the least recentry hit is pushed out from the table.

Hits 8389 : 0.2/hour, 5.3/day, 165.1/month

PageViews: 7,564 hits / 343 nets
[ The source of this SHTML file (1554 hits) ]