Question 4
Started with a real access log
Discarded all but timings, IP addresses, Agent strings
Created reconstituted log with
hairy Perl script