Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!caen!spool.mu.edu!cs.umn.edu!uc!apctrc!voyager!zdkm01
From: zdkm01@hou.amoco.com (Dave Moore)
Newsgroups: news.software.nntp
Subject: SYSLOG & LOG what does the info. represent
Message-ID: <1991Jun14.155035.584@hou.amoco.com>
Date: 14 Jun 91 15:50:35 GMT
Article-I.D.: hou.1991Jun14.155035.584
Sender: news@hou.amoco.com
Organization: Amoco Corp. ISD, SSS/Mini-Micro Systems
Lines: 26
Originator: zdkm01@taurus

NNTP SYSLOG with LOG defined.  It appears that the logging information
does not accurately reflect a session conducted by a remote news
reader.  For instance, in the following session I read only two
articles in comp.sources.wanted and one article in comp.bugs.sys5:

Jun 14 10:28:17 voyager nntpd[545]: taurus connect
Jun 14 10:28:26 voyager nntpd[545]: taurus group comp.sources.wanted
Jun 14 10:28:41 voyager nntpd[545]: taurus group comp.bugs.sys5
Jun 14 10:28:44 voyager nntpd[545]: taurus exit 5 articles 2 groups
Jun 14 10:28:45 voyager nntpd[545]: taurus times user 0.310 sys.......

What does the articles number(5) reflect?

Also, I've observered the behaviour where a long list of groups will
be associated with a connection for a news reader when in fact only
a couple of groups were read.   Does this happen as a result of 
newgroups being added to the users .newsrc file?  What are the 
conditions in order for a group to be recorded for a session?

Any information someone might be able to provide regarding the log
information would be very greatly appreciated.  Thanks in advance.
-- 
Dave Moore	dmoore@hou.amoco.com
Amoco Corp. ISD SSS/Mini-Micro Systems
Houston, Texas (713) 556-2242
Socon 8-321-2242 CSSVM(ZDKM01)