[mistwang]

Originally Posted by Da-Idiot

I used mod_status for monitoring in real time the actual urls being requested and sent. As well as the ip address that requests are coming from and being sent to.

I can also set the program that relies on this to send out threshold alarms to email or pager.

This would be an awesome add-on for lsws if not already attainable.

Yes, it looks cool.
If you are using scripts to detect possible attack based those information, it is not a good choice at all.
We have built-in anti-attack features to fend off attacks. Just relax. :-)
Have you read this and adjust your configuration according?
http://www.litespeedtech.com/docs/HowTo_QA.html#qa_dos