Details of webserver log analysis - Revision history

George2: Replaced content with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry
0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp..."

2014-05-21T09:39:19Z

Replaced content with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br> 0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp..."

George2 at 09:38, 21 May 2014

2014-05-21T09:38:18Z

George2 at 09:38, 21 May 2014

2014-05-21T09:38:10Z

George2 at 09:37, 21 May 2014

2014-05-21T09:37:58Z

George2 at 09:37, 21 May 2014

2014-05-21T09:37:44Z

George2 at 09:37, 21 May 2014

2014-05-21T09:37:14Z

George2 at 09:33, 21 May 2014

2014-05-21T09:33:40Z

George2: Created page with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry
0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cro..."

2014-05-21T09:29:35Z

Created page with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br> 0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cro..."

New page

The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br>
0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cron_log 2>&1

← Older revision		Revision as of 09:39, 21 May 2014
Line 1:		Line 1:
	The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br>		The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br>
	0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cron_log 2>&1<br>		0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cron_log 2>&1<br>
−	~~The contents of the script are shown below:<br>~~
−
−	~~<nowiki>~~
−	~~<HTML>~~
−
−
−
−
−	~~<BODY bgcolor="#E6E6FA" >~~
−
−	~~<h1 style="text-align:center;margin-left:auto;margin-right:auto;"><span~~
−	~~style="color:#ff0000"><span style="background-color:#00ff00"><span~~
−	~~style="color:#000000;background-color:#808000"><span~~
−	~~style="background-color:#dfdf00">Gold Webservers log file analysis. Updated~~
−	~~every 20 minutes</span></span></span></span></h1>~~
−
−
−	~~<TABLE>~~
−	~~<TR><TH COLSPAN="2" BGCOLOR="#AAAAAA" > The top users of www.gold.ac.uk as taken from the last 2000 enries of the access_log files on both webservers~~
−	~~</TH></TR>~~
−	~~<TR><TD>~~
−
−	~~<table border="2" cellpadding="2" BGCOLOR="#BBBBBB" >~~
−	~~<TR>~~
−	<TD colspan="3"> Jupiter between `head -1 /var/tmp/jupiter_tail.log \| gawk '{ print $4}'\|sed -e 's/^\[//' ` and `tail -1 /var/tmp/jupiter_tail.log \| gawk '{ print $4}' \|sed -e 's/^\[//' ` </TD>
−	~~</TR>~~
−	~~<TR>~~
−	~~<TH>Recent hits</TH><TH> IP Address</TH><TH> DNS Entry if available</TH>~~
−	~~</TR>~~
−	~~END~~
−	~~while read INP~~
−	do
−	~~echo $INP \| gawk '{ print "<TR><TD>",$1,"</TD><TD>",$2,"</TD><TD>",$3,"</TD></TR>" }' >> /var/tmp/secure.html~~
−
−	~~done < /var/tmp/jupiter_all~~
−	~~echo "</TABLE>" >> /var/tmp/secure.html~~
−
−
−	~~cat <<END >>/var/tmp/secure.html~~
−
−	~~</TD><TD>~~
−
−	~~<table border="2" cellpadding="2" BGCOLOR="#BBBBBB" >~~
−	~~<TR>~~
−	<TD colspan="3"> Uranus between `head -1 /var/tmp/uranus_tail.log \| gawk '{ print $4}'\|sed -e 's/^\[//' ` and `tail -1 /var/tmp/uranus_tail.log \| gawk '{ print $4}' \|sed -e 's/^\[//' ` </TD>
−	~~</TR>~~
−	~~<TR>~~
−	~~<TH>Recent hits</TH><TH> IP Address</TH><TH> DNS Entry if available</TH>~~
−	~~</TR>~~
−	~~END~~
−	~~while read INP~~
−	do
−	~~echo $INP \| gawk '{ print "<TR><TD>",$1,"</TD><TD>",$2,"</TD><TD>",$3,"</TD></TR>" }' >> /var/tmp/secure.html~~
−
−	~~done < /var/tmp/uranus_all~~
−	~~echo "</TABLE>" >> /var/tmp/secure.html~~
−
−	~~echo "</TD></TR>" >> /var/tmp/secure.html~~
−
−
−	~~echo "</BODY>" >> /var/tmp/secure.html~~
−	~~echo "</HTML>" >> /var/tmp/secure.html~~
−
−	~~mv /var/tmp/secure.html /var/www/html/webteam~~
−	~~echo `date`~~
−
−	~~</nowiki>~~

@@ Line 5: / Line 5: @@
 <nowiki>
    <HTML>
    <BODY  bgcolor="#E6E6FA"   >

@@ Line 5: / Line 5: @@
 <nowiki>
    <HTML>
    <BODY  bgcolor="#E6E6FA"   >

@@ Line 4: / Line 4: @@
 <nowiki>
-   <HTML><br>
+   <HTML>
    <BODY  bgcolor="#E6E6FA"   >

@@ Line 4: / Line 4: @@
 <nowiki>
-   <HTML>
+   <HTML><br>
    <BODY  bgcolor="#E6E6FA"   >

@@ Line 3: / Line 3: @@
 The contents of the script are shown below:<br>
+<nowiki>
    <HTML>
    <BODY  bgcolor="#E6E6FA"   >
@@ Line 62: / Line 62: @@
     mv  /var/tmp/secure.html   /var/www/html/webteam
    echo `date`

← Older revision		Revision as of 09:33, 21 May 2014
Line 1:		Line 1:
	The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br>		The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry<br>
−	0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cron_log 2>&1	+	0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cron_log 2>&1<br>
		+	The contents of the script are shown below:<br>
		+
		+
		+	<HTML>
		+	<BODY bgcolor="#E6E6FA" >
		+
		+	<h1 style="text-align:center;margin-left:auto;margin-right:auto;"><span
		+	style="color:#ff0000"><span style="background-color:#00ff00"><span
		+	style="color:#000000;background-color:#808000"><span
		+	style="background-color:#dfdf00">Gold Webservers log file analysis. Updated
		+	every 20 minutes</span></span></span></span></h1>
		+
		+
		+	<TABLE>
		+	<TR><TH COLSPAN="2" BGCOLOR="#AAAAAA" > The top users of www.gold.ac.uk as taken from the last 2000 enries of the access_log files on both webservers
		+	</TH></TR>
		+	<TR><TD>
		+
		+	<table border="2" cellpadding="2" BGCOLOR="#BBBBBB" >
		+	<TR>
		+	<TD colspan="3"> Jupiter between `head -1 /var/tmp/jupiter_tail.log \| gawk '{ print $4}'\|sed -e 's/^\[//' ` and `tail -1 /var/tmp/jupiter_tail.log \| gawk '{ print $4}' \|sed -e 's/^\[//' ` </TD>
		+	</TR>
		+	<TR>
		+	<TH>Recent hits</TH><TH> IP Address</TH><TH> DNS Entry if available</TH>
		+	</TR>
		+	END
		+	while read INP
		+	do
		+	echo $INP \| gawk '{ print "<TR><TD>",$1,"</TD><TD>",$2,"</TD><TD>",$3,"</TD></TR>" }' >> /var/tmp/secure.html
		+
		+	done < /var/tmp/jupiter_all
		+	echo "</TABLE>" >> /var/tmp/secure.html
		+
		+
		+	cat <<END >>/var/tmp/secure.html
		+
		+	</TD><TD>
		+
		+	<table border="2" cellpadding="2" BGCOLOR="#BBBBBB" >
		+	<TR>
		+	<TD colspan="3"> Uranus between `head -1 /var/tmp/uranus_tail.log \| gawk '{ print $4}'\|sed -e 's/^\[//' ` and `tail -1 /var/tmp/uranus_tail.log \| gawk '{ print $4}' \|sed -e 's/^\[//' ` </TD>
		+	</TR>
		+	<TR>
		+	<TH>Recent hits</TH><TH> IP Address</TH><TH> DNS Entry if available</TH>
		+	</TR>
		+	END
		+	while read INP
		+	do
		+	echo $INP \| gawk '{ print "<TR><TD>",$1,"</TD><TD>",$2,"</TD><TD>",$3,"</TD></TR>" }' >> /var/tmp/secure.html
		+
		+	done < /var/tmp/uranus_all
		+	echo "</TABLE>" >> /var/tmp/secure.html
		+
		+	echo "</TD></TR>" >> /var/tmp/secure.html
		+
		+
		+	echo "</BODY>" >> /var/tmp/secure.html
		+	echo "</HTML>" >> /var/tmp/secure.html
		+
		+	mv /var/tmp/secure.html /var/www/html/webteam
		+	echo `date`

Details of webserver log analysis - Revision history

George2: Replaced content with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry 0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp..."

George2 at 09:38, 21 May 2014

George2 at 09:38, 21 May 2014

George2 at 09:37, 21 May 2014

George2 at 09:37, 21 May 2014

George2 at 09:37, 21 May 2014

George2 at 09:33, 21 May 2014

George2: Created page with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry 0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cro..."

George2: Replaced content with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry
0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp..."

George2: Created page with "The script to create this web page is run from roots cron on backup.gold.ac.uk using the following crontab entry
0,20,40 * * * * /usr/local/bin/security.sh > /var/tmp/cro..."