epylog January 2012

epylog@lists.fedorahosted.org

3 participants
307 discussions

[epylog: 240/297] And remove, since it's too noisy.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit 19c77d8f5b86e569e3f27a8ac36fd323ffda381c Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Fri Apr 9 18:33:40 2004 +0000 And remove, since it's too noisy. etc/notice_dist.xml | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) --- diff --git a/etc/notice_dist.xml b/etc/notice_dist.xml index fe3e62f..6e0dde0 100644 --- a/etc/notice_dist.xml +++ b/etc/notice_dist.xml @@ -83,10 +83,5 @@ <report>insmod errors</report> </notice> - <notice id="selinux-denied"> - <regex>audit\S+:\s+avc:\s+denied\s+\{\s([^\}]+)\s\}.*exe=(\S+).*scontext=(\S+)</regex> - <report>SELinux: denied "%s" for "%s" (scontext=%s)</report> - </notice> - </notices>

1 0

[epylog: 239/297] Rudimentary SELinux handling.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit f8f4e1ef4d1c6b170af51546e48a09f633a27b30 Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Fri Apr 9 18:27:16 2004 +0000 Rudimentary SELinux handling. etc/notice_dist.xml | 6 ++++++ 1 files changed, 6 insertions(+), 0 deletions(-) --- diff --git a/etc/notice_dist.xml b/etc/notice_dist.xml index c8dbc85..fe3e62f 100644 --- a/etc/notice_dist.xml +++ b/etc/notice_dist.xml @@ -82,5 +82,11 @@ <regex>insmod: Hint: insmod errors</regex> <report>insmod errors</report> </notice> + + <notice id="selinux-denied"> + <regex>audit\S+:\s+avc:\s+denied\s+\{\s([^\}]+)\s\}.*exe=(\S+).*scontext=(\S+)</regex> + <report>SELinux: denied "%s" for "%s" (scontext=%s)</report> + </notice> + </notices>

1 0

[epylog: 238/297] Apparently try: if on one line is not happy. :)
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit f5e86c02b2114bafae9ddac0d6221c112c125071 Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Fri Apr 9 17:57:43 2004 +0000 Apparently try: if on one line is not happy. :) py/epylog/__init__.py | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) --- diff --git a/py/epylog/__init__.py b/py/epylog/__init__.py index e88d595..bd4ddd3 100644 --- a/py/epylog/__init__.py +++ b/py/epylog/__init__.py @@ -762,7 +762,8 @@ class InternalModule: ## # Handle silly fake ipv6 addresses # - try: if ip_addr[:7] == '::ffff:': ip_addr = ip_addr[7:] + try: + if ip_addr[:7] == '::ffff:': ip_addr = ip_addr[7:] except: pass try: return self._known_hosts[ip_addr] except KeyError: pass

1 0

[epylog: 237/297] Oopsie-daisy.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit d915ed79baf6a0ca44764f2b080bfd59e508683b Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Fri Apr 9 17:49:36 2004 +0000 Oopsie-daisy. configure.in | 2 +- epylog.spec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) --- diff --git a/configure.in b/configure.in index f03bc45..f076b61 100644 --- a/configure.in +++ b/configure.in @@ -2,7 +2,7 @@ dnl Process this file with autoconf to produce a configure script AC_INIT(epylog.spec) PACKAGE_TARNAME=epylog -PACKAGE_VERSION=0.9.7 +PACKAGE_VERSION=1.0 dnl Package information. PACKAGE=$PACKAGE_TARNAME diff --git a/epylog.spec b/epylog.spec index 055c1f3..8700a29 100644 --- a/epylog.spec +++ b/epylog.spec @@ -113,7 +113,7 @@ external perl modules, or intend to write some of your own. #------------------------------------------------------------------------------ %changelog -* Fri Apr 09 2004 Konstantin Ryabitsev <icon(a)linux.duke.edu> 1.0 +* Fri Apr 09 2004 Konstantin Ryabitsev <icon(a)linux.duke.edu> 1.0-1 - Version 1.0 - Do not depend on elinks to make things simpler

1 0

[epylog: 236/297] Preparing for 1.0
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit 0b45b185c88e4713246d4deacacbe5a99dcfe1c7 Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Fri Apr 9 17:48:38 2004 +0000 Preparing for 1.0 ChangeLog | 8 +++++++- README | 2 +- doc/roadmap.txt | 11 +++-------- doc/templates/template_mod.py | 10 ++++++++++ epylog.spec | 12 ++++++++---- etc/epylog.conf.in | 2 +- man/epylog-modules.5 | 2 +- man/epylog.8 | 2 +- man/epylog.conf.5 | 2 +- modules/logins_mod.py | 8 -------- py/epylog/__init__.py | 9 ++++++--- 11 files changed, 39 insertions(+), 29 deletions(-) --- diff --git a/ChangeLog b/ChangeLog index e6aa127..ca31e28 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,10 @@ -Epylog-0.9.7-cvs +Epylog-1.0 + * Out with 1.0 already! + * Handle ::ffff: fake ipv6 addresses for hostname resolution + * Do not depend on elinks in RPM. + * Default setting is to send html-only (so we don't depend on lynx) + +Epylog-0.9.7 * Accepted Makefile patches from Will Newton * Accepted patches for missing logs from Will Newton (#135) * Fixes for bugs/RFEs: #136, #146, #148, #210, and others. diff --git a/README b/README index d106bb9..6456177 100644 --- a/README +++ b/README @@ -33,7 +33,7 @@ epylog(a)linux.duke.edu. Please send all your inquires there. LICENSE -------- -Copyright (C) 2001-2001 by Duke University +Copyright (C) 2001-2004 by Duke University This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License diff --git a/doc/roadmap.txt b/doc/roadmap.txt index 8fa8e00..32bec5b 100644 --- a/doc/roadmap.txt +++ b/doc/roadmap.txt @@ -1,15 +1,10 @@ Epylog Roadmap ------------- -/-> 0.9 You are here. -| * Normalize logging calls. -| * Add doc strings to python code -| * Bugfixes and cleanups -| * Release the project on freshmeat +/-> 1.0 You are here +| * Do bugfixes | -|-> 1.0 Do bugfixes -| -\-> 1.1 i18n support +\-> 1.1 See Linux@DUKE Bugzilla -- $Id$ diff --git a/doc/templates/template_mod.py b/doc/templates/template_mod.py index f33cbcc..2085af6 100644 --- a/doc/templates/template_mod.py +++ b/doc/templates/template_mod.py @@ -64,6 +64,16 @@ class template_mod(InternalModule): # See the methods in epylog.InternalModule for insight on # which convenience methods are available to you. # + + ## + # WARNING WARNING WARNING + # + # Please read documents/modules.txt, especially the section about + # making your modules THREAD SAFE. You _CANNOT_ access external + # objects for writing! This will cause data loss. This step should be + # SOLELY for analyzing the log string and doing network lookups. + # All processing should be done in finalize stage. + # ## # DO SOME STUFF HERE diff --git a/epylog.spec b/epylog.spec index a59a99b..055c1f3 100644 --- a/epylog.spec +++ b/epylog.spec @@ -11,8 +11,8 @@ Summary: New logs analyzer and parser. Name: epylog -Version: 0.9.7 -Release: 1.%{_pyver} +Version: 1.0 +Release: 0.%{_pyver} Epoch: 0 License: GPL Group: Applications/System @@ -21,8 +21,8 @@ URL: http://linux.duke.edu/projects/epylog/ BuildRoot: %{_tmppath}/%{name}-%{version}-root BuildArch: noarch BuildPrereq: perl, %{_python}, gzip, sed -Requires: %{_python}, elinks, libxml2-python -#Obsoletes: dulog +Requires: %{_python}, libxml2-python +Obsoletes: dulog %description Epylog is a new log notifier and parser which runs periodically out of @@ -113,6 +113,10 @@ external perl modules, or intend to write some of your own. #------------------------------------------------------------------------------ %changelog +* Fri Apr 09 2004 Konstantin Ryabitsev <icon(a)linux.duke.edu> 1.0 +- Version 1.0 +- Do not depend on elinks to make things simpler + * Mon Feb 09 2004 Konstantin Ryabitsev <icon(a)linux.duke.edu> 0.9.7-1 - Version 0.9.7 - Depend on python version. diff --git a/etc/epylog.conf.in b/etc/epylog.conf.in index 602d8e7..c2540e2 100644 --- a/etc/epylog.conf.in +++ b/etc/epylog.conf.in @@ -16,7 +16,7 @@ publishers = mail method = mail smtpserv = /usr/sbin/sendmail -t mailto = root@localhost -format = both +format = html lynx = %%LYNX_BIN%% include_rawlogs = no rawlogs_limit = 200 diff --git a/man/epylog-modules.5 b/man/epylog-modules.5 index 21977b0..592f362 100644 --- a/man/epylog-modules.5 +++ b/man/epylog-modules.5 @@ -1,4 +1,4 @@ -.TH "epylog-modules" "5" "0.9" "Konstantin Ryabitsev" "Applications/System" +.TH "epylog-modules" "5" "1.0" "Konstantin Ryabitsev" "Applications/System" .SH NAME \fBepylog-modules\fR \- epylog module cofiguration. diff --git a/man/epylog.8 b/man/epylog.8 index 2f64053..cf6f43e 100644 --- a/man/epylog.8 +++ b/man/epylog.8 @@ -1,4 +1,4 @@ -.TH "epylog" "8" "0.9" "Konstantin Ryabitsev" "Applications/System" +.TH "epylog" "8" "1.0" "Konstantin Ryabitsev" "Applications/System" .SH NAME \fBepylog\fR \- Syslog new log notifier and parser. diff --git a/man/epylog.conf.5 b/man/epylog.conf.5 index 8b0fd8e..fbf096e 100644 --- a/man/epylog.conf.5 +++ b/man/epylog.conf.5 @@ -1,4 +1,4 @@ -.TH "epylog.conf" "5" "0.9" "Konstantin Ryabitsev" "Applications/System" +.TH "epylog.conf" "5" "1.0" "Konstantin Ryabitsev" "Applications/System" .SH NAME \fBepylog.conf\fR \- epylog configuration diff --git a/modules/logins_mod.py b/modules/logins_mod.py index 860f9ea..08795c8 100644 --- a/modules/logins_mod.py +++ b/modules/logins_mod.py @@ -190,7 +190,6 @@ class logins_mod(InternalModule): self.imp3_fail_re = rc('LOGIN\s(\S*)\sto\s(\S*):\S*\sas\s(\S*)') self.proftpd_open_re = rc('proftpd\[\S*:.*\[(\S+)\].*USER\s(.*):\sLogin\ssuccessful') self.proftpd_failure_re = rc('proftpd\[\S*:.*\[(\S+)\].*USER\s([^:\s]*)') - self.fake_ipv6_re = rc('^::ffff:(\S+)') self.qpopper_open_re = rc('user "(.*)" at $.*$\s(\S*)') self.qpopper_fail_re = rc(':\s(.*)\sat\s(\S*)') self.cyrus_open_re = rc('login:.*\[(\S*)\]\s(\S*)\s') @@ -452,7 +451,6 @@ class logins_mod(InternalModule): return None service, user, rhost = mo.groups() service = '%s(cr)' % service - rhost = self._unfakeipv6(rhost) rhost = self.gethost(rhost) restuple = self._mk_restuple(action, system, service, user, '', rhost) return {restuple: mult} @@ -466,7 +464,6 @@ class logins_mod(InternalModule): return None service, rhost = mo.groups() service = '%s(cr)' % service - rhost = self._unfakeipv6(rhost) rhost = self.gethost(rhost) user = 'unknown' restuple = self._mk_restuple(action, system, service, user, '', rhost) @@ -648,11 +645,6 @@ class logins_mod(InternalModule): else: userat = 'unknown' return userat - def _unfakeipv6(self, rhost): - mo = self.fake_ipv6_re.search(rhost) - if mo: rhost = mo.group(1) - return rhost - def _get_cyrus_service(self, str): service = 'unknown' mo = self.cyrus_service_re.search(str) diff --git a/py/epylog/__init__.py b/py/epylog/__init__.py index ee48d6d..e88d595 100644 --- a/py/epylog/__init__.py +++ b/py/epylog/__init__.py @@ -47,7 +47,7 @@ from report import Report from module import Module from log import LogTracker -VERSION = 'Epylog-0.9.7' +VERSION = 'Epylog-1.0' CHUNK_SIZE = 8192 GREP_LINES = 10000 QUEUE_LIMIT = 500 @@ -759,12 +759,15 @@ class InternalModule: def gethost(self, ip_addr): """do reverse lookup on an ip address""" + ## + # Handle silly fake ipv6 addresses + # + try: if ip_addr[:7] == '::ffff:': ip_addr = ip_addr[7:] + except: pass try: return self._known_hosts[ip_addr] except KeyError: pass - try: name = socket.gethostbyaddr(ip_addr)[0] except socket.error: name = ip_addr - self._known_hosts[ip_addr] = name return name

1 0

[epylog: 235/297] Putting back in the hostbased handling that got lost when branching.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit 00a80aed8d16b58c2175aa671b9f5c9345a32035 Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Tue Feb 10 18:15:35 2004 +0000 Putting back in the hostbased handling that got lost when branching. modules/logins_mod.py | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) --- diff --git a/modules/logins_mod.py b/modules/logins_mod.py index 619e00b..860f9ea 100644 --- a/modules/logins_mod.py +++ b/modules/logins_mod.py @@ -201,6 +201,7 @@ class logins_mod(InternalModule): 'publickey': 'pk', 'rhosts-rsa': 'rsa', 'rsa': 'rsa', + 'hostbased': 'host', 'none': 'none'} self.report_wrap = '<table width="100%%" rules="cols" cellpadding="2">%s</table>'

1 0

[epylog: 234/297] Blessing it.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit fbbc7bafa7e816f4ec2b307f1e05f33c70b4465b Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Tue Feb 10 14:52:51 2004 +0000 Blessing it. epylog.spec | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) --- diff --git a/epylog.spec b/epylog.spec index 16a3087..a59a99b 100644 --- a/epylog.spec +++ b/epylog.spec @@ -12,7 +12,7 @@ Summary: New logs analyzer and parser. Name: epylog Version: 0.9.7 -Release: 0.5.%{_pyver} +Release: 1.%{_pyver} Epoch: 0 License: GPL Group: Applications/System

1 0

[epylog: 233/297] It doesn't like dashes. :)
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit 23b7d01b259c166a0cfbbb48373d071fbc332c7e Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Tue Feb 10 14:48:11 2004 +0000 It doesn't like dashes. :) epylog.spec | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) --- diff --git a/epylog.spec b/epylog.spec index 1a65545..16a3087 100644 --- a/epylog.spec +++ b/epylog.spec @@ -12,7 +12,7 @@ Summary: New logs analyzer and parser. Name: epylog Version: 0.9.7 -Release: 0.5-%{_pyver} +Release: 0.5.%{_pyver} Epoch: 0 License: GPL Group: Applications/System

1 0

[epylog: 232/297] Allow for building versions for python-2.2 and python-2.3.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit 512f5b33e795f865e2b478903b99ce9a83fcabbe Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Tue Feb 10 14:45:21 2004 +0000 Allow for building versions for python-2.2 and python-2.3. epylog.spec | 14 +++++++++----- 1 files changed, 9 insertions(+), 5 deletions(-) --- diff --git a/epylog.spec b/epylog.spec index 8d9fff4..1a65545 100644 --- a/epylog.spec +++ b/epylog.spec @@ -1,7 +1,10 @@ # $Id$ +%{!?_pyver:%define _pyver 2.2} + +%define _python %{_bindir}/python%{_pyver} %define _vardir %{_localstatedir}/lib -%define _pydir %{_libdir}/python2.2/site-packages +%define _pydir %{_libdir}/python%{_pyver}/site-packages %define _perldir %{_libdir}/perl5/site_perl #------------------------------------------------------------------------------ @@ -9,7 +12,7 @@ Summary: New logs analyzer and parser. Name: epylog Version: 0.9.7 -Release: 0.4 +Release: 0.5-%{_pyver} Epoch: 0 License: GPL Group: Applications/System @@ -17,8 +20,8 @@ Source: http://linux.duke.edu/projects/epylog/download/%{name}-%{version URL: http://linux.duke.edu/projects/epylog/ BuildRoot: %{_tmppath}/%{name}-%{version}-root BuildArch: noarch -BuildPrereq: perl, python, gzip, sed -Requires: /usr/bin/python2, elinks, libxml2-python +BuildPrereq: perl, %{_python}, gzip, sed +Requires: %{_python}, elinks, libxml2-python #Obsoletes: dulog %description @@ -48,7 +51,7 @@ external perl modules, or intend to write some of your own. %prep %setup -q %configure \ - --with-python=/usr/bin/python2 \ + --with-python=%{_python} \ --with-lynx=/usr/bin/links ## # Fix version. @@ -112,6 +115,7 @@ external perl modules, or intend to write some of your own. %changelog * Mon Feb 09 2004 Konstantin Ryabitsev <icon(a)linux.duke.edu> 0.9.7-1 - Version 0.9.7 +- Depend on python version. * Mon Sep 22 2003 Konstantin Ryabitsev <icon(a)linux.duke.edu> 0.9.6-1 - Version 0.9.6

1 0

[epylog: 231/297] use --cron in example.
by Konstantin Ryabitsev 23 Jan '12

23 Jan '12

commit 67ae6d60aef1d53d198f6b211983adfa5f951c6c Author: Konstantin Ryabitsev <icon(a)mricon.com> Date: Mon Feb 9 21:28:54 2004 +0000 use --cron in example. man/epylog.8 | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) --- diff --git a/man/epylog.8 b/man/epylog.8 index f8bab1b..2f64053 100644 --- a/man/epylog.8 +++ b/man/epylog.8 @@ -106,9 +106,9 @@ The useful way to run from a command line is with \-\-last. E.g.: .B epylog \-\-last 2w .LP When running from cron, you want to store the offsets and not rely on -timestamps. Therefore you'll want this: +timestamps. There is a mode that allows you to do this: .LP -.B epylog \-\-quiet \-\-store\-offsets +.B epylog \-\-cron .SH "AUTHORS" .LP

1 0

← Newer
1
...
5
6
7
8
9
10
11
...
31
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epylog January 2012