SF.net SVN: logwatch:[261] trunk/scripts/services/afpd

Revision: 261
          http://sourceforge.net/p/logwatch/code/261
Author:   opoplawski
Date:     2014-10-08 21:00:29 +0000 (Wed, 08 Oct 2014)
Log Message:
-----------
[afpd] Use strict; Ignore more lines; Aggregate unmatched entries

Modified Paths:
--------------
    trunk/scripts/services/afpd

Modified: trunk/scripts/services/afpd
===================================================================
--- trunk/scripts/services/afpd	2014-10-08 20:34:27 UTC (rev 260)
+++ trunk/scripts/services/afpd	2014-10-08 21:00:29 UTC (rev 261)
@@ -18,10 +18,20 @@
 ## copyright please contact [email protected]
 #########################################################
 
-$Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;
-$IgnoreUnmatched = $ENV{'afpd_ignore_unmatched'} || 0;
+use strict;
+my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0;
+my $IgnoreUnmatched = $ENV{'afpd_ignore_unmatched'} || 0;
 
+my $ThisLine;
+my $Starts;
+my $Stops;
+my $TotalRead;
+my $TotalWritten;
+my %UserLogin;
+my %OtherList;
+
 while (defined($ThisLine = <STDIN>)) {
+   chomp($ThisLine);
    if ( ( $ThisLine =~ /^FTP session closed./ ) or
          ( $ThisLine =~ /^(ANONYMOUS )?FTP login as \'.*\' from [^ ]+ \[.*\] to .*/ ) or
          ( $ThisLine =~ /^FTP no transfer time out, disconnected\./ ) or
@@ -33,11 +43,19 @@
          ( $ThisLine =~ /server_child/ ) or
          ( $ThisLine =~ /session from/ ) or
          ( $ThisLine =~ /ASIP session/ ) or
+         ( $ThisLine =~ /^afp_zzz: (entering|waking up from) extended sleep/ ) or
+         ( $ThisLine =~ /^afp_disconnect: trying primary reconnect/ ) or
+         ( $ThisLine =~ /^afp_disconnect: primary reconnect succeeded/ ) or
+         ( $ThisLine =~ /^Reconnect: transfering session to child/ ) or
+         ( $ThisLine =~ /^Reconnect: killing new session child.* after transfer/ ) or
+         ( $ThisLine =~ /^afp_dsi_transfer_session: successfull primary reconnect/ ) or
+         ( $ThisLine =~ /^AFP Replay Cache match: id: .* \/ cmd: AFP_FLUSHFORK/ ) or
+         ( $ThisLine =~ /^afp_over_dsi: client logged out, terminating DSI session/ ) or
          ( $ThisLine =~ /logout/ )
       ) {
       # We don't care about these
    }
-   elsif ( ($Junk,$Login) = ( $ThisLine =~ /(login|Login by) ([^ ]+)$/) ) {
+   elsif ( my ($Junk,$Login) = ( $ThisLine =~ /(login|Login by) ([^ ]+)$/) ) {
       chomp($Login);
       $UserLogin{$Login}++;
    }
@@ -47,19 +65,19 @@
    elsif ( $ThisLine =~ /shutting down/ ) {
       $Stops++;
    }
-   elsif ( ($Read,$Write) = ( $ThisLine =~ /statistics: (\d+\.\d+) KB read, (\d+\.\d+) KB/) ) {
+   elsif ( my ($Read,$Write) = ( $ThisLine =~ /statistics: (\d+\.\d+) KB read, (\d+\.\d+) KB/) ) {
       $TotalRead+=$Read;
       $TotalWritten+=$Write;
    }
    else {
       # Report any unmatched entries...
-      push @OtherList,$ThisLine;
+      $OtherList{$ThisLine} += 1;
    }
 }
 
 if (keys %UserLogin and $Detail) {
    print "\nUsers Logged In:\n";
-   foreach $Line (keys %UserLogin) {
+   foreach my $Line (keys %UserLogin) {
       print "   $Line : $UserLogin{$Line} Time(s)\n";
    }
 }
@@ -76,9 +94,9 @@
    print "\nTransfer Statistics: $TotalRead KB read, $TotalWritten KB written\n";
 }
 
-if (($#OtherList >= 0) and (not $IgnoreUnmatched)) {
+if ((keys %OtherList) and (not $IgnoreUnmatched)) {
    print "\n**Unmatched Entries**\n";
-   print @OtherList;
+   print "  $_: $OtherList{$_} time(s)\n" foreach keys %OtherList;
 }
 
 exit(0);

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.


------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk