Re: Need suggestion about what's going on
On Thursday 06,March,2014 10:58 PM, Joel Rees wrote:
> On Thu, Mar 6, 2014 at 1:04 PM, lina <lina.lastname@gmail.com> wrote:
>> Hi,
>>
>> I use Ghostery with firefox. So when I visited my own testing homepage,
>> the google analytic won't have a record. But I also keep a short script
>> to record who visited my homepage at the serve side.
>
> the httpd logs, correct?
It is a php script in my webpage. Methinks it is right.
<?php
$ip = get_client_ip();
echo "Welcome ";
echo $ip;
echo chr(13);
$time = date('Y-m-d H:i:s');
$filename = "users.log";
$fh = fopen($filename, "a");
$userinfo = $time . "\t" . $ip . "\n";
fwrite($fh, $userinfo);
fclose($fh);
?>
>
>> This morning, I opened my browser, just to read couple of news. And from
>> google analytic I noticed someone who visited my page around 10am.
>
> Google Analytics doesn't show IP addresses, correct?
Google Analytics doesn't show IP address. But showes the visitor's
system information, institute and browser information, which match mine,
and as always, the Ghostery helps me hide from it. I mean, in the past,
whenever I check my homepage, google analytics doesn't record.
>
>> After
>> further check, it showed me it's exactly from my own laptop.
>> As indicated at 10:48:28
>>
>> 2014-03-06 10:48:28 172.21.100.159
>> 2014-03-06 11:04:12 172.21.100.159
>> 2014-03-06 11:08:51 172.21.100.159
>
> 172.16.0.0/12, so private area network address.
syslog.6.gz:Mar 1 11:03:54 dove dhclient: DHCPOFFER from 172.21.100.254
syslog.6.gz:Mar 1 11:03:54 dove dhclient: DHCPACK from 172.21.100.254
syslog.6.gz:Mar 1 11:03:54 dove dhclient: bound to 172.21.100.159 --
renewal in 37611 seconds.
syslog.6.gz:Mar 1 11:03:55 dove dhclient: DHCPACK from 172.21.100.254
syslog.6.gz:Mar 1 11:03:55 dove ifd[2632]: + DHCPACK from 172.21.100.254
syslog.6.gz:Mar 1 11:03:55 dove dhclient: bound to 172.21.100.159 --
renewal in 38029 seconds.
syslog.6.gz:Mar 1 11:03:55 dove ifd[2632]: + bound to 172.21.100.159 --
renewal in 38029 second
I think for months, I have this ip address, namely 172.21.100.159
>
>> I was surprise, certainly I didn't browse my homepage at that time,
>> neither I had some TAB opened in firefox, so I checked the history of
>> today from firefox, except couple of news-site I visited, I am sure that
>> I didn't visit my own page at that time.
>
> As Scott suggested, did you check the time settings on your server and
> your laptop? And did you check whether the logs are recording in your
> timezone, or perhaps in UTC?
I checked the time very carefully. Long time ago I have updated the time
zone of the google analytics. The server is our institute one, so the
time is the same.
>
>> At 11:04:12 I visited my homepage, and I checked google analytics, it
>> didn't have my record, so the Ghostery still works very well. But later
>> surprisingly, at 11:08:51 there is another visit without my
>> real-involvement, and it is from my own laptop, but not from my opening
>> firefox.
>
> What else runs on your laptop? Test scripts?
I don't know.
>
> And another option, are your sure no one in your private network might
> have been assigned (or arbitrarily grabbed) the address you are using?
I don't know about the private network I am in. Seriously. Everyday even
after reboot, unplug, the local ip is fixed.
>
> But if your server is not in your private network, 172.21.100.159
> would be on it's private network, not yours. I think.
>
>> I am confused. Any suggestion about what's going on.
>
> Well, there is also the possibility that you are reading the referrer field.
referer field?
>
> Or maybe someone is spoofing your, or maybe you have something
> untoward that has gotten itself loaded and running on your laptop.
Something weird recently, after starting my laptop, which I left in the
office always, it is not as before connection to the network
automatically, I need manually restart network-manager, I think some
part I have misconfigured, but have not figured out.
>
Reply to: