Lire CVS snapshot ready for testing (was: Re: how to build Lire ....)
Joost van Baal
joostvb at logreport.org
Wed Feb 6 15:52:43 CET 2002
Hi Cedric and others,
On Tue, Feb 05, 2002 at 02:47:04PM +0100, gross, cedric wrote:
> > De : Joost van Baal [mailto:joostvb at logreport.org]
> > Envoye : lundi 4 fevrier 2002 17:19
> [...]
>
> > - I could build a snapshot
> > Lire release and upload it to http://logreport.org/pub/ . Give a call
> > in case you'd prefer that.
>
> Yep, please do, if you have time...
> I would like to take advantage of what you have improved since last
> release.
I just uploaded a snapshot tarball from Lire's current CVS, it's
available from
http://logreport.org/pub/cvs-snapshots/lire-full-20020214-pre1.tar.gz .
A stable version will evolve from this, and get released at about
February 14.
We encourage users who'd like to help to download and install this
pre-release version of Lire and report any bugs (both in code and
documentation) or annoyance they come across.
Note that this is _not_ a stable release, and shouldn't be used as such.
This release is intended only for those who like to play with the
cutting edge stuff, and who are willing help by filing bug reports.
Please send bug reports to the public development at logreport.org list.
Important changes since last version:
* Output when requesting HTML or XHTML was changed. The output is now always
an uncompressed tar file (like when generating images before). This makes
HTML and XHTML output identical whether or not images are generated.
Also, when report sections are used, the (X)HTML report will be broken into
several files.
* Reports can now be subdivided into sections. This can be achieved by using
=section directives in the report's configuration file. Consult the
User's Manual for the complete story.
* Sections can contain filters that will be applied to the input of all the
section's subreports. Consult the User's Manual for the complete story.
* New proxy superservice, with support for MS ISA, WELF and squid logs and
top-users-by-bytes, top-urls-by-users, top-destinations,
top-destinations-by-clients and top-destinations-by-bytes reports.
* New database superservice, with service MySQL and reports top-users,
top-databases, actions-by-period, top-querytypes.
* New FTP service: IIS FTP Logs (iis_ftp).
* New firewall services: iptables, welf.
WELF is the WebTrends Enhanced Log Format supported by several firewall
products (see http://www.webtrends.com/partners/firewall.htm for a list).
Common firewalls using this format: SunScreen, SonicWall, Raptor, etc.
This makes Lire support a lot of firewalls. We didn't test it with all of
those products though. So we greatly appreciate all feedback regarding how
Lire behaves with those firewalls' logs.
* The firewall superservice can also be used for network intrusion detection
type of logs.
* The firewall superservice now includes a lot of new reports.
* The incompabitilities between the Cisco service and the other firewall
services were resolved.
* New ftp reports: bytes-by-user-by-period, top-users-bytes.
* New www reports: requests-by-keywords, top-referers.
* New email service: Netscape Messaging Server (nms).
* Support for Netscape Messaging Server log daemon.
* Improvements in postfix email service: more robust qmgr line handling (no
longer creates bogus size fields in dlf), support for postfix/virtual lines.
(Thanks Cedric Gross for helping us!)
* Online responder more robust against evil characters in subject of received
email message. Directories in var/lib/lire/data/{email,log,report}, named
after ID tags, which are contructed from these subjects, could contain \ in
their names. This is ugly, and breaks non-robust scripts. It even might
have had security implications. People running an online responder should
upgrade. The change is in lr_processmail.
* Changes to the LRSML DTD:
You may have to modify custom report specifications you wrote.
- The 'sort' attribute was removed from the filter_spec element.
* The WWW::* perl modules, like WWW::Useragent and WWW::Domain, are moved to
Lire::WWW::*, in order to avoid future nameclashes.
Thanks for your interest in LogReport, kind Regards,
Joost van Baal
--
Joost van Baal . . http://www.logreport.org/
. .
/^LogReport$/ . . joostvb at logreport.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.logreport.org/pipermail/announcement/attachments/20020206/a327d62b/attachment.bin
More information about the Announcement
mailing list