This screenshot shows how glTail visualizes a comment spam attack in my configuration.

A few days ago, in my usual daily link browsing, I ran across a link to something called “glTail“, which was described as “realtime logfile visualization”. I’m often keeping an eye on my server logs to catch unusual activity, so I thought I’d give it it a look. There’s a video there that shows it in action — very cool!

For those of you aren’t interested enough to click the link yet, let me see if I can give a description that does it some justice:

• Monitors logfiles in realtime over an ssh connection to remote servers.
• Can monitor multiple logfiles on multiple servers, simultaneously.
• Currently has parsers for Apache, IIS, RubyOnRails, and Postfix logs (and I found that the Postfix parser works pretty good on Sendmail logs).
• Pretty!

It’s written in Ruby, and requires OpenGL. Runs fine on my laptop under Ubuntu. And if you don’t know how to program in Ruby, don’t let that discourage you — I don’t know Ruby, but I’ve been able to modify the code enough to copy the “postfix” parser into a new “sendmail” parser, and customize it slightly. And I’m thinking about trying to write a parser for my MySQL logs. Hopefully, a future version will add more built-in parsers and move configuration into an external file, though.

Currently, I’m using it to monitor three of my WordPress blogs, plus my mail server. Several times now, I’ve easily spotted comment spam attacks, and quickly plugged them in my firewall. I added handlers to pop up notices whenever a comment is posted, and to track the posts-per-minute by IP number. One of my co-workers is planning to use it to see if our load balancer is actually balancing our web server requests evenly. All-in-all, glTail is a nice tool for your sysadmin arsenal.

ShareThis

After hearing one of my co-workers rave about how impressed he was with Fedora Core, I was going to give that a try. But the DVD he burned for me wouldn’t install for some reason. So I decided to go with Ubuntu. This was probably just as well, as we use a lot of Debian Linux stuff at work, and Ubuntu is Debian-based.

I won’t bore you with details of the install (which went smoothly), or with detailed lists of what I’ve done to customize my system. But I do want to point out some good links and highlights for the curious. Especially what I did about those pesky “can’t-live-without” Windows applications.

I knew that the main Windows application that I would miss was Photoshop. Yes, I know about the Gimp, and I’m sure it’s quite capable of doing 99% of the things that I do in Photoshop. But I’ve been using PS for about 10 years now, and I know my around that application. I’ve tried using the Gimp a few times, but I just can’t make myself use it enough to get used to that interface. I also know about Gimpshop, but I already own the real thing, and I’d prefer to use it.

Enter Wine. Wine is an implementation of the Windows API under Unix. And it really works. I just mounted my Photoshop CD, and ran wine Setup.exe, and Photoshop was installed into the default wine environment under my account. I did run into some glitches trying to run it at first, however. But after a bit of searching, I discovered that the solution was to remove some unneeded definitions for a Wacom graphics tablet from my xorg.conf file.

The other main Windows app that I thought I’d miss was iTunes. However, rather than running that under Wine, I decided to check out the native Linux offerings. I tried XMMS, but it was too much like WinAmp, and I didn’t like the interface. I also tried Rhythmbox, and it was okay, but just didn’t seem like I could tweak it enough. Then I found Amarok 1.4.2, which is what I’m running now.

Amarok has an interface and feature-set very similar to iTunes. It’s also very easy to hook into it and write your own scripts to interface with the player. I was able to whip up a perl script to send “now playing” song information to my web server very quickly. I just wish that there was a universally accepted way to transport song ratings from one system to another. I lost all my iTunes ratings, play counts, and such. It’s probably possible to extract that from the iTunes data files, but I don’t have enough spare time to mess with that. In any case, I’m pretty happy with Amarok.

And finally, I also found some simple instructions for running Internet Explorer under Ubuntu. This is great for web development, as I’ll be able to test pages with IE 5.0, 5.5, and 6.0. This procedure installs each version of IE into its own Wine environment, so you can run them all simultaneously without side-effects. I’m keeping my eye out for IE 7.0, but it might be a while, because it apparently depends on some bits of Windows XP that aren’t yet handled by Wine.

In any case, I’m still getting along just fine with Ubuntu. The main problem I’ve had so far is that some of my Firefox and Thunderbird extensions don’t want to work correctly (ForecastFox, for example). But I’m sure that the wrinkles will get smoothed out over time. If you are thinking of installing Ubuntu, or if you already have, and need some pointers on what you can do to tweak your sytem, try the following useful links:

• Mark Pilgrim’s Essentials, 2006
• Top 10 Ubuntu Apps and Tweaks
• 14 Days of Ubuntu
• Automating GNOME with Devil’s Pie

Sometime in the future, I might post more specific details on other utilities I’ve installed or configuration options I’ve tweaked to get my system set up the way I want. If you’d be interested in that, let me know!

ShareThis

They are using a license called CDDL, which is a spinoff of the MPL. CDDL is OSI approved. So, brownie points in their favor for that.

The company released all of the code associated with Solaris 10 at OpenSolaris.org: the core operating system, networking, system libraries and commands.

All the features available in Solaris 10 are in the download, officials said, for both Sparc and x64/x86 architectures.

via internetnews.com

ShareThis