I have an access log item looks like this: ddd.ddd.ddd.ddd - - [dd/ddd/dddd:01:08:23 -0400] "GET /finger-pulse-oximeter-octivetech-300c-p-37.html?osCsid=ddd HTTP/1.0" 200 10006 http://www.ddd.ddd.dd/ "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" in which the user ip, date, domain name, and session id details are replaced by "ddd" . My question is that, the resource in the request line, /finger-pulse-oximeter-octivetech-300c-p-37.html?osCsid=ddd, is actually a web page, but why the referer, http://www.ddd.ddd.dd/ , is another page? Thanks in advance! --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx