Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

It started with thousands of "(direct) / (none)" inbound visits showing in Google Analytics.

A close look at the server log file found many lines with truncated referrer information coming from an ad server.

Our ad agency is using an adserver to display flash ads on many sites which bring the visitors to our site.

Here is good referrer information from a log file line

aka-cdn-ns.somesite.de/apps/107/Ad7963755St3Sz1085Sq102862503V0Id1/Specific_Target_720x300.swf?targetTAG=_blank&clickTarget=_blank&pathTAG=http%3A//aka-cdn-ns.somesite.de/apps/107/Ad7963755St3Sz1085Sq102862503V0Id1/&closeTAG=javascript%3AcloseAdLayer3922521%28%29&openTAG=javascript%3AopenAdLayer3922521%28%29&expandTAG=javascript%3Aexpand3922521%28%29&collapseTAG=javascript%3Acollapse3922521%28%29&clicktarget=_blank&clickTarget=_blank&clickTARGET=_blank&CURRENTDOMAIN=adserver.somesite.de

Here is a truncated information from a log file line

aka-cdn-ns.somesite.de/apps/169/Ad7936681St3Sz154Sq102861060V0Id11/Specific_Target_160x600.swf?targetTAG=_blank&clickTarget=_blank&pat

My question: What causes the referrer information to get truncated in the log file?

Is this the fault of the ad server? Is it sending http headers with truncated referrer information?

Is this the fault of my web server that in many cases writes the line with truncated referrer information?

Update:

Following the information in DerfK's answer, I have checked the User Agent information in the log file and found that the all the truncated referrer visits was by visitors that uses IE, all versions.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

The Referer header comes from the browser, not from a server, so it's not the ad server's fault. Since your server appears capable of logging longer Referer headers, its not your server's fault.

That leaves the browser. It would probably be educational to have the server log the User Agent string and compare the ones with truncated headers to the ones without.

share|improve this answer
    
Thanks! That was really helpful. The common factor is (drum roll please...) MSIE! 6.0, 7.0 , 8.0, 9.0 –  Hanan Cohen Aug 13 '12 at 7:27

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.