I am working on using Wowza logs to determine the amount of video watched on our web-server over a given period of time. In order to accomplish this, I am parsing the logs for play and stop events that have the same c-client-ID. The problem i'm running into is that I am, at times, seeing multiple play events / stop events with a duplicated or re-used c-client-ID value.
I correct in reasoning that for any connection to the server, the ID for that connection should be associated with a single play event and a single stop event. Is there any reason this c-client-ID value would be duplicated as described above?
Look for the x-event "destroy" row for a client-id. Or the last row in the log with a client-id. The cs-bytes (client to server bytes) and sc-bytes (server to client bytes) are cumulative, so that is the only row you really need for stats.
Yes it is for RTMP clients which uses a NetConnection that corresponds to a client in Wowza and could start and stop many Netstreams. There might be more than one at a time, and/or one after the other. This would most likely be a custom player. Most standard players connect then play, then stop play and disconnect