We are currently using BorderManager version 3.8 as our firewall. We
recently launched our Internet site with a reverse proxy implementation
through BorderManager. As part of this project, we're utilizing the
WebTrends software for web metrics and analytics for our site's visitor
activity. We have noticed that BorderManager's extended log has the
following format:

[10/Sep/2004:11:28:12 -0400]
GET /internet/images/navL/6_business_on.gif "Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; .NET CLR 1.1.4322)"

But Webtrends is expecting an NCSA-recognized extended file format as

www.club-voile.fr - - [12/Jun/2001:19:35:39 +0000] "GET / HTTP/1.0" 200
6054 "http://search.yahoo.com/bin/search?p=trends%20internet" "SPRY-
Mosaic/v8.32 (Windows 16-bit) SPRY_package/v4.00"

which actually contains the following fields:

UserAddress (numeric IP or domain name): www.club-voile.fr
Rfc931 (Domain for multi-homed web servers): -
User Authentication: -
Date/Time: 12/Jun/2001:19:35:39
GMT Offset: +0000
Action: "GET / HTTP/1.0"
Return Code: 200
Size: 6054
Referrer: "http://search.yahoo.com/bin/search?p=trends%20internet"
Browser/Platform: "SPRY-Mosaic/v8.32 (Windows 16-bit) SPRY_package/v4.00"

How can we get BorderManager to configure int his format? Thanks in

Humberto Sanchez