LogAnalysis
[logs] ugliest application logs ever? Jan 24 2008 02:14AM
Anton Chuvakin (anton chuvakin org) (5 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 09:12PM
Leo D. Geoffrion (ldg skidmore edu) (1 replies)
RE: [logs] ugliest application logs ever? Jan 24 2008 10:50PM
Tina Bird (tbird precision-guesswork com)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:52PM
Jason Lewis (jlewis packetnexus com) (1 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 09:29PM
Andrew Hay (andrewsmhay gmail com)
Re: [logs] ugliest application logs ever? Jan 24 2008 02:18PM
David Corlette (DCorlette novell com) (3 replies)
Hi all,

Quite frankly, your ugly logs are all amateur attempts at ugly logs ;-) HERE is the ugliest log of all time:

Sep 27 22:09:47 sles10sp1oes oesaudit: type=SYSCALL msg=audit(09/27/07 22:09:45.683:318) : arch=i386 syscall=open success=yes exit=3 a0=80e3f08 a1=18800 a2=10 a3=80e3f08 items=1 ppid=12894 pid=12899 auid=unknown(4294967295) uid=user1 gid=admingroup euid=user1 suid=user1 fsuid=user1 egid=admingroup sgid=admingroup fsgid=admingroup tty=pts2 comm=bash exe=/bin/bash subj=unconstrained key=(null)
Sep 27 22:09:47 sles10sp1oes oesaudit: type=CWD msg=audit(09/27/07 22:09:45.683:318) : cwd=/home/user1
Sep 27 22:09:47 sles10sp1oes oesaudit: type=PATH msg=audit(09/27/07 22:09:45.683:318) : item=0 name=. inode=120549 dev=03:02 mode=dir,755 ouid=user1 ogid=admingroup rdev=00:00
Sep 27 22:09:47 sles10sp1oes oesaudit: ----

This is "File open" under OES2 (the Linux Auditing Framework).

>>> On Wed, Jan 23, 2008 at 9:14 PM, in message
<b2591e2e0801231814l46dd8c3eqd083549ab0ec2360 (at) mail.gmail (dot) com [email concealed]>, "Anton Chuvakin"
<anton (at) chuvakin (dot) org [email concealed]> wrote:
> All,
>
> Ah, long time - no post! :-)
>
> I wanted to turn this into a formal contest but figured I'd poll the
> list first: what are the ugliest, most useless application logs that
> you've seen? Logs that defy log analysis, that are full of numeric
> codes not explained anywhere? Logs that don't say what they mean (and
> vice versa)? Logs that omit the most critical piece of info?
>
> Here is my example:
>
> |22:22:32|BTC| 7|000|DDIC | |R49|Communication error, CPIC
> return code 020, <application> return code 456
>
> Why it sux: numeric codes (twice), ambiguous language, no sense of
> priority, etc.
>
> More?
>
> Best,

_______________________________________________
LogAnalysis mailing list
LogAnalysis (at) loganalysis (dot) org [email concealed]
http://www.loganalysis.org/mailman/listinfo/loganalysis

[ reply ]
RE: [logs] ugliest application logs ever? Jan 25 2008 12:51AM
Mark Poepping (poepping cmu edu) (1 replies)
Re: [logs] ugliest application logs ever? Jan 25 2008 02:50AM
Matt Cuttler (mcuttler bnl gov)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:53PM
Marcus J. Ranum (mjr ranum com)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:43PM
Anton Chuvakin (anton chuvakin org)
Re: [logs] ugliest application logs ever? Jan 24 2008 06:21AM
John Kinsella (jlk thrashyour com) (3 replies)
RE: [logs] ugliest application logs ever? Jan 24 2008 03:47PM
Fenwick, Wynn (wynn fenwick cgi com) (1 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 08:38PM
Patrick Whalen (pwhalen rescomp com)
RE: [logs] ugliest application logs ever? Jan 24 2008 02:58PM
Paul Melson (pmelson gmail com)
Re: [logs] ugliest application logs ever? Jan 24 2008 12:47PM
Matt Cuttler (mcuttler bnl gov) (2 replies)
RE: [logs] ugliest application logs ever? Jan 24 2008 08:09PM
Rainer Gerhards (rgerhards hq adiscon com) (1 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 10:13PM
Daniel Cid (dcid ossec net)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:17PM
Andrew Hay (andrewsmhay gmail com)
RE: [logs] ugliest application logs ever? Jan 24 2008 05:00AM
Tina Bird (tbird precision-guesswork com) (2 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 10:41PM
Jason Haar (Jason Haar trimble co nz)
RE: [logs] ugliest application logs ever? Jan 24 2008 05:23AM
Marcus J. Ranum (mjr ranum com) (2 replies)
Re: [logs] ugliest application logs ever? Jan 29 2008 03:06AM
Mordechai T. Abzug (morty frakir org) (1 replies)
[logs] Log Generator Jan 29 2008 06:17AM
harshad mengle wipro com (2 replies)
Re: [logs] Log Generator Jan 29 2008 03:26PM
Jim Prewett (download hpc unm edu) (2 replies)
RE: [logs] Log Generator Jan 29 2008 07:52PM
Clayton Dukes (cdukes) (cdukes cisco com) (1 replies)
RE: [logs] Log Generator Jan 29 2008 08:39PM
Marcus J. Ranum (mjr ranum com) (1 replies)
Re: [logs] Log Generator Jan 30 2008 08:33PM
Tom Le (dottom gmail com)
RE: [logs] Log Generator Jan 29 2008 03:31PM
harshad mengle wipro com
RE: [logs] Log Generator Jan 29 2008 03:00PM
Clayton Dukes (cdukes) (cdukes cisco com)
Re: [logs] ugliest application logs ever? Jan 24 2008 01:52PM
Tim Sailer (sailer bnl gov)


 

Privacy Statement
Copyright 2010, SecurityFocus