LogAnalysis
[logs] ugliest application logs ever? Jan 24 2008 02:14AM
Anton Chuvakin (anton chuvakin org) (5 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 09:12PM
Leo D. Geoffrion (ldg skidmore edu) (1 replies)
RE: [logs] ugliest application logs ever? Jan 24 2008 10:50PM
Tina Bird (tbird precision-guesswork com)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:52PM
Jason Lewis (jlewis packetnexus com) (1 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 09:29PM
Andrew Hay (andrewsmhay gmail com)
Re: [logs] ugliest application logs ever? Jan 24 2008 02:18PM
David Corlette (DCorlette novell com) (3 replies)
RE: [logs] ugliest application logs ever? Jan 25 2008 12:51AM
Mark Poepping (poepping cmu edu) (1 replies)
Re: [logs] ugliest application logs ever? Jan 25 2008 02:50AM
Matt Cuttler (mcuttler bnl gov)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:53PM
Marcus J. Ranum (mjr ranum com)
Re: [logs] ugliest application logs ever? Jan 24 2008 07:43PM
Anton Chuvakin (anton chuvakin org)
Re: [logs] ugliest application logs ever? Jan 24 2008 06:21AM
John Kinsella (jlk thrashyour com) (3 replies)
RE: [logs] ugliest application logs ever? Jan 24 2008 03:47PM
Fenwick, Wynn (wynn fenwick cgi com) (1 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 08:38PM
Patrick Whalen (pwhalen rescomp com)
RE: [logs] ugliest application logs ever? Jan 24 2008 02:58PM
Paul Melson (pmelson gmail com)
Re: [logs] ugliest application logs ever? Jan 24 2008 12:47PM
Matt Cuttler (mcuttler bnl gov) (2 replies)
RE: [logs] ugliest application logs ever? Jan 24 2008 08:09PM
Rainer Gerhards (rgerhards hq adiscon com) (1 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 10:13PM
Daniel Cid (dcid ossec net)
Oh no, the "last message repeated n times" is the worse one for sure! I ranted
about it in my blog a while back:

http://www.ossec.net/dcid/?p=119

As for fun logs, these I some I had the pleasure to encounter:

Aug 11 09:11:19 xx MSM-B HAS TAKEN OVER AS THE MASTER
Aug 11 09:11:19 xx Free Entry Not Available
Aug 11 09:11:19 xx null pif ? exit! 0

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

On 1/24/08, Rainer Gerhards <rgerhards (at) hq.adiscon (dot) com [email concealed]> wrote:
> > > "Last message repeated" is always good, but oh, this is SO mine to
> win! ;)
>
> Actually, IMHO, the "Last message repeated n times" is not as bad as it
> sounds. It means that message immediately in front of it must be
> repeated n times when you run an analysis. Of course, you loose the
> timestamp of those previous n messages, but everything else is inact
> (else you wouldn't get that "repeated" message...).
>
> Some folks really like this message because it keeps their logs clean of
> repeated stuff (and it may save a lot of space if somtehing runs wild).
>
> Of course, there are many cases where the repeat logic does not make
> much sense. There are even cases where it makes no sense at all with a
> given output. Thus, with rsyslog ( http://www.rsyslog.com ), three is a
> simple -e (every) option that turns off this feature. Some outputs also
> disable it (for them) automatically, because they can not work well
> enough with that feature (I think the database writer turns it off, but
> I need to look that up...
>
> Well... Not an answer to the original question. Maybe my mumbling can be
> added to the useless message case ;)
>
> Rainer
>
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysis (at) loganalysis (dot) org [email concealed]
> http://www.loganalysis.org/mailman/listinfo/loganalysis
>
_______________________________________________
LogAnalysis mailing list
LogAnalysis (at) loganalysis (dot) org [email concealed]
http://www.loganalysis.org/mailman/listinfo/loganalysis

[ reply ]
Re: [logs] ugliest application logs ever? Jan 24 2008 07:17PM
Andrew Hay (andrewsmhay gmail com)
RE: [logs] ugliest application logs ever? Jan 24 2008 05:00AM
Tina Bird (tbird precision-guesswork com) (2 replies)
Re: [logs] ugliest application logs ever? Jan 24 2008 10:41PM
Jason Haar (Jason Haar trimble co nz)
RE: [logs] ugliest application logs ever? Jan 24 2008 05:23AM
Marcus J. Ranum (mjr ranum com) (2 replies)
Re: [logs] ugliest application logs ever? Jan 29 2008 03:06AM
Mordechai T. Abzug (morty frakir org) (1 replies)
[logs] Log Generator Jan 29 2008 06:17AM
harshad mengle wipro com (2 replies)
Re: [logs] Log Generator Jan 29 2008 03:26PM
Jim Prewett (download hpc unm edu) (2 replies)
RE: [logs] Log Generator Jan 29 2008 07:52PM
Clayton Dukes (cdukes) (cdukes cisco com) (1 replies)
RE: [logs] Log Generator Jan 29 2008 08:39PM
Marcus J. Ranum (mjr ranum com) (1 replies)
Re: [logs] Log Generator Jan 30 2008 08:33PM
Tom Le (dottom gmail com)
RE: [logs] Log Generator Jan 29 2008 03:31PM
harshad mengle wipro com
RE: [logs] Log Generator Jan 29 2008 03:00PM
Clayton Dukes (cdukes) (cdukes cisco com)
Re: [logs] ugliest application logs ever? Jan 24 2008 01:52PM
Tim Sailer (sailer bnl gov)


 

Privacy Statement
Copyright 2010, SecurityFocus