topic Re: logtail required for logcheck script in Operating System - HP-UX

logtail required for logcheck script

Ed Williams_3 — Thu, 01 Apr 2004 15:35:02 GMT

Hello,

I am trying to use a public domain script named logcheck to monitor various system logs
for malicious activity. The logcheck script
requires the use of an executable named logtail. Does anybody know where I can get
this executable for HPUX 10.20 and 11.00?
The logcheck script came with a logtail.c
that could be compiled for HPUX, but I don't
have an ansi C compiler.

Thank you.

Re: logtail required for logcheck script

Marvin Strong — Thu, 01 Apr 2004 16:04:25 GMT

http://www.fourmilab.ch/webtools/logtail/

I quick google search revealed that if thats what you were looking for.

Re: logtail required for logcheck script

Ed Williams_3 — Thu, 01 Apr 2004 17:35:30 GMT

Marvin,

Thanks for the reply. I did find this
Perl version before, but I was really
hoping to get the binary for HP so it
could run much faster. I've found binaries
for SUN, so why not HP? Thanks,

Ed

Re: logtail required for logcheck script

Marvin Strong — Fri, 02 Apr 2004 12:36:20 GMT

Oh I'm sorry I misread your post.

with gcc you should be able to pass -Aa option (I think) for ansi compliance.

I haven't tested it but it should work.

Re: logtail required for logcheck script

Ed Williams_3 — Fri, 02 Apr 2004 13:01:51 GMT

Marvin,

I thought so too. Now I'm trying to
find a binary gcc for HPUX 10.20. I
don't want to download the whole source
mess and build all the pieces just to
get a gcc compiler for HPUX 10.20. This
simple task of installing logcheck on
our 10.20 and 11.00 systems is turning
into a big mess. You wouldn't happen
to know where I can find a gcc binary
for HPUX 10.20 would ya?

Thanks,

Ed

Re: logtail required for logcheck script

Marvin Strong — Fri, 02 Apr 2004 13:41:23 GMT

http://www.abo.fi/~jmunsin/gcombust/README.hp-ux.html

Thats a page I found for some other stuff, but it seems to have links to some 10.20 depots towards the bottom.

I usually get stuff from:
http://hpux.connect.org.uk/

But they don't seem to do 10.20 anymore since HP dropped support.

Sorry I can't be more help than that.

Re: logtail required for logcheck script

Ed Williams_3 — Fri, 02 Apr 2004 13:58:47 GMT

Marvin,

I was finally able to compile the logtail.c
program that is required for the logcheck
utility I'm trying to use. The new logtail
executable works on HPUX 10.20 and 11.00.
I've attached it to this reply. Do you
know of some place this can be posted so
others may benefit from my struggle?

Thank you for your efforts.

Ed