using lire-20010629 on RedHat Linux 7.0

Wytze van der Raay wytze at nlnet.nl
Fri Jun 29 15:20:43 CEST 2001


Hello LogReporters,

Here is some feedback on using the (pre?)release lire-20010629
on a RedHat Linux 7.1 system.

First of all, the supplied rpm does not install on this system,
due to a large number of failed dependencies:

# rpm -ivh lire-20010629-1.noarch.rpm
error: failed dependencies:
        perl(Config) is needed by lire-20010629-1
        perl(DB_File) is needed by lire-20010629-1
        perl(Data::Dumper) is needed by lire-20010629-1
        perl(Fcntl) is needed by lire-20010629-1
        perl(GD) is needed by lire-20010629-1
        perl(GD::Graph) is needed by lire-20010629-1
        perl(GD::Graph::Data) is needed by lire-20010629-1
        perl(GD::Graph::Error) is needed by lire-20010629-1
        perl(GD::Graph::axestype) is needed by lire-20010629-1
        perl(GD::Graph::bars) is needed by lire-20010629-1
        perl(GD::Graph::colour) is needed by lire-20010629-1
        perl(GD::Graph::lines) is needed by lire-20010629-1
        perl(GD::Graph::pie) is needed by lire-20010629-1
        perl(GD::Graph::utils) is needed by lire-20010629-1
        perl(GD::Text) is needed by lire-20010629-1
        perl(GD::Text::Align) is needed by lire-20010629-1
        perl(IO::File) is needed by lire-20010629-1
        perl(IO::Handle) is needed by lire-20010629-1
        perl(IO::Seekable) is needed by lire-20010629-1
        perl(POSIX) is needed by lire-20010629-1
        perl(SelectSaver) is needed by lire-20010629-1
        perl(Symbol) is needed by lire-20010629-1
        perl(Tie::Hash) is needed by lire-20010629-1
        perl(constant) is needed by lire-20010629-1
        perl(integer) is needed by lire-20010629-1
        perl(lib) is needed by lire-20010629-1
        perl(overload) is needed by lire-20010629-1
        perl(strict) is needed by lire-20010629-1
        perl(vars) is needed by lire-20010629-1
#

Note that perl-5.6.0-10a is present on this system, which includes
many (but not all) of the above named perl modules. But the granularity
by which this is administered in the RH 7.0 RPM database appears to be
much coarser than lire is assuming.

So back to installing from the lire-20010629.tar.gz image as I was
used to do anyway :-). Installs fine, but running lr_run as root is
no longer possible, due to an added test against this in lr_run :-(
Although I do sympathize with the idea that one should not want to
run this software as root, reality is that in the RedHat world the
relevant logfiles like /var/log/messages and /var/log/maillog are
created and maintained by syslogd as rw------- root/root. This makes
sense since these files do contain very sensitive information from
time to time. But it is incompatible with lire's decision to refuse
processing under the root account ...
I'd suggest to make it possible to lift this restriction, for example
by adding a configuration variable for it in /etc/lire/defaults.

After I patched lr_run, reports were generated nicely as before.
Since I have the java xalan processor installed, I decided to
give lire a retry with it. After creating a shell wrapper for
xalan, the lire config detected it, and started using it.
Unfortunately, the ascii reports coming out of this were not
quite the same as the previous ones (without the xalan processing)
-- the formatting was distinctly poorer in several cases (although
it's use of .......... lines was more consistent than the noxalan
version). I'll show some characteristic samples:

[xalan version]
deliveries per to-domain, top 10


        navarro.bebop.nlnet.nl ............................... 658

        localhost ............................................ 351

        navarro .............................................. 127

        nlnet.nl ............................................. 117

        logreport.org ......................................... 24

        bebop.nlnet.nl ........................................ 19

        eia.nl ................................................ 10

        bind9.logreport.org .................................... 9

        subdimension.com ....................................... 5

        sci.kun.nl ............................................. 5


[noxalan version]
  deliveries per to-domain, top 10

   navarro.bebop.nlnet.nl ..................................... 658
   localhost .................................................. 351
   navarro .................................................... 131
   nlnet.nl ................................................... 117
   logreport.org ............................................... 24
   bebop.nlnet.nl .............................................. 19
   eia.nl ...................................................... 10
   bind9.logreport.org .......................................... 9
   subdimension.com ............................................. 5
   sci.kun.nl ................................................... 5


[xalan version]
deliveries to users, per to-domain, top 30, top 5 users


        logreport.org ......................................... 24
    joostvb at logreport.org ............................... 14
    bod at logreport.org .................................... 4
    egonw at logreport.org .................................. 3
    people at logreport.org ................................. 1
    development at logreport.org ............................ 1


[noxalan version]
  deliveries to users, per to-domain, top 30, top 5 users

   logreport.org ............................................... 24
     joostvb at logreport.org                                       14
     bod at logreport.org                                            4
     egonw at logreport.org                                          3
     people at logreport.org                                         1
     development at logreport.org                                    1


[xalan version]
per hour traffic summary: number of delivery attempts per hour


        20010617 .............................................. 30
    04 ................................................... 1
    05 ................................................... 8
    06 ................................................... 2
    07 ................................................... 6
    08 ................................................... 1
    09 ................................................... 1
    10 ................................................... 4
    12 ................................................... 2
    15 ................................................... 1
    18 ................................................... 3
    22 ................................................... 1


[noxalan version]
  per hour traffic summary: number of delivery attempts per hour

   20010617 .................................................... 30
     04                                                           1
     05                                                           8
     06                                                           2
     07                                                           6
     08                                                           1
     09                                                           1
     10                                                           4
     12                                                           2
     15                                                           1
     18                                                           3
     22                                                           1

Ideally, one should not see any difference between the xalan and
noxalan versions I think (this may require adjustments on both
sides though).

Happy hacking!
-- wytze




-- 
To UNSUBSCRIBE, email to questions-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
questions-request at logreport.org



More information about the Questions mailing list