[EnGarde] Re: Daily log summary

From: Dave Wreski <dave_at_nospam>
Date: Tue Mar 11 2003 - 05:05:25 GMT
To: engarde-users@engardelinux.org

Randy,

> 1. Are the outputs cumulative from previous days, or just from the current
> day? (I am assuming cumulative) I have noticed most days list a reloading
> of the configuration or an incorrect password entered.

If you're using the Community edition, please make sure you've applied the swatch upgrade. If you're using the Professional edition, there's improvements for it coming very shortly.

> 2. Where are the daily summary files located? I am assuming that they
> gather statistics using perl or something similar, which I could modify.
> Is this the 'sa' syststat series of programs and scripts located at
> /usr/lib/sa?

I believe /var/log/audit and /etc/cron.daily/reporting is where you want to be looking.

Best,
Dave -- Dave Wreski Guardian Digital, Inc. (201) 934-9230 Pioneering. Open Source. Security. dave_at_guardiandigital.com http://www.guardiandigital.com ------------------------------------------------------------------------ To unsubscribe email engarde-users-request@engardelinux.org with "unsubscribe" in the subject of the message.

This message: [ Message body ]
Next message: Richard-James Acreman: "[EnGarde] Re: mod_auth_mysql Configuration"
Previous message: Ryan W. Maple: "[EnGarde] Re: [ESA-20030307-007] 'snort' RPC preprocessor buffer overflow. ...... rpm problem?"
In reply to: randymb_at_nospam: "[EnGarde] Daily log summary"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]