Awstats traffic versus Ispcp traffic

[kvaes]

At the moment (less than 24h after the reset)
ispcp : 196.66 MB
awstats : 19.04 MB + 4.68 MB
domainY-traf.log : 26 MB

cat domain.Y-traf.log | ./count.sh
26 MB

count.sh

PHP Code:

#!/bin/bash
total=0
while read line
do
  let total=total+line
done
let total=(total/1024)/1024
echo "$total MB" 


Has there been any updates in the stats parsing scripts lately?

[joximu]

May I put an idea here?

Is awstats counting only the traffic of content that is really transfered and ispcp maybe every file - even if it was cached by the client?

Just a thought...

/J

[BeNe]

ispCP is working with IPTABLES and is counting EVERY BYTE transferd on this Port! AWStats is _only_ using the ApacheLog.

Greez BeNe

[joximu]

BeNe Wrote:ispCP is working with IPTABLES and is counting EVERY BYTE transferd on this Port! AWStats is _only_ using the ApacheLog.

Greez BeNe

Yes but the iptables counting is server wide - the per-domain counting is done with the *traf.log apache logfiles...

/J

[kvaes]

The traffic values in the combined & the traf log are the same. So (imo) it's related to the parsing of those files. When doing the "manual count" of the traf file (check script above), it seems that awstats is doing the right thing, and ispcp is taking the whole traf file each time. (could be wrong here, thinking out loud)

[raphael]

Quote: the iptables counting is server wide

absolutely right; the data gatered from iptables is only displayed as the server's stats

I've never verified the traffic counting scripts, so they might need to be fixed.
Btw, by saying 'ispcp : 196.66 MB' you mean the value ispCP shows for web traffic, right? and you don't have neither a subdomain nor an alias, right?

[kvaes]

raphael Wrote:

Quote: the iptables counting is server wide

absolutely right; the data gatered from iptables is only displayed as the server's stats

I've never verified the traffic counting scripts, so they might need to be fixed.
Btw, by saying 'ispcp : 196.66 MB' you mean the value ispCP shows for web traffic, right? and you don't have neither a subdomain nor an alias, right?

I'm talking about the web traffic indeed. The domain has several subdomains, but their info is written to the traff & combined log too...