Tuesday, January 04, 2011

Tandem Monitoring


I've noticed visits from DoJ have started happening in pairs--the same IP address, but two different computers, one using Netscape, the other IE, and within seconds of each other.

As I've explained before, per Site Meter, "If there were no out clicks on the last page viewed, the view time of that page will be 0 because it is unknown how long the page was actually viewed."

So--anybody have any ideas for why two simultaneous visits?

10 comments:

Uncle Kenny said...

Well, for one thing, your site looks OK in Netscape/Firefox, but is very ugly printed from there. It prints nicely from IE.

If they are keeping printed records, and who wouldn't, then IE is what to use.

Anonymous said...

If I were to hazard a guess I'd say that it's the same user, probably surfing from a virtual machine, which would give you the actual browsing stats, ect. The second entry is probably from the OS hosting the virtual machine which is just acting as a proxy.

Or it could be firewall software which is adding a referring entry.

Or it could be an echo from their proxy server.

Or I could just be filled to the brim with crap. In any case, I think it's coming from one machine.

Pat H. said...

When I worked in the US government, the Dept. of Veterans Affairs as an RN, all of the computers we had (after Clinton flushed the Macintoshs) only had IE on them. When the window of opportunity still existed, I installed FireFox on all of ours in the operating room, all of which were still functional when I retired five years ago.

Could be you were visited by two individuals, one of which had the good sense to be using FireFox, the other did not.

jon said...

the hit on the right looks like a human being sitting at a computer.

the hit on the left looks like the statistics collector just filled in "netscape" because it didn't have any user-agent from the client.

the hits are seven seconds apart, in the middle of lunch hour UTC-0800 -- 3:20pm on the potomac, which is where the network that IP belongs to is situated.

it looks to me like a half-finished transaction got held up on his end by network congestion. the user-agent never made it from his end to the webserver end. the guy got impatient and hit F5 to reload the page. the second connection went through fine.

if available, check the statistics you have that show all user-agents ever collected. see if there is an "unknown" category, and see if there are names of any proxy server software. if there ain't none of those, the stats collector probably just decides its a netscape client and moves on with its life.

David Codrea said...

Thing is, Jon, this seems to happen all the time when they visit now--and has been happening for a few months now...

Anonymous said...

Just a thought...
If it is happening all the time now, I thing someone on DOJ end has boss snooper software watching and collecting data.

Phelps said...

The IP might or might not be identical -- we just know that they are on the same 255.255.255.0 subnet.

If they are the same, the five second difference could be from a net-nanny type proxy -- "this site is just full of racist, hateful, nasty nasty stuff that no government employee in his right mind would like to see unless he has to. Please press "I understand the risks, proceed" to continue on or "AIEEEE, run away!" to go back to Huffington Post.

Crotalus (Dont Tread on Me) said...

Know what I find interesting? The fact that the visit lengths are 0 seconds. Does the government have computers that can hide their tracks?

MamaLiberty said...

The spook assigned to monitor WoG has a split personality? [grin]

Phil said...

I have had someone/s visit my place for years now that SiteMeter shows to be in the middle of a golf course in Virginia, up to seven! different IP's from the same location over a 24 hour period.

Quite interesting.

Oh yeah, they have been watching for years now.
The Seargent of Arms for the US Senate, WAPO, Military, all kinds of interesting places when you take time to look.

Nasa, Boeing, Navy Intel, all kinds of interesting parties, just to keep an eye on a drunken rant fest of a site.

Take my word for it, you and everyone who stops by here is on the same fucking list I have been on for a long time.