Hi,

My understanding of the log files generated by windows media server is
that:

The [cs-duration] fields tells me how long the client was connected
for, and the [date] and [time] fields tell me when the log entry was
generated.

Log entries are generated when the client disconnects. So if the [cs-
duration] field contains 120 and the [time] field sats 20:05, I can
deduce that the client connected at 20:03

Am I right? The reason I am asking is that based on these calculations
a client of mine had listeners at 4:30pm - but he swears he didn't
start broadcasting until after 7pm

The log file shows a [cs-duration] of 9305 and a [time] of 19:06:26.

Any advice as to where I may be going wrong would be appricated as I
don't want to call my client a liar!

Duane