1# This file is automagically generated by ./configure. Don't mess with it 2# by hand unless you know what you're doing. --A.L.Lambert 3 4Summary: A handy syslog file(s) manipulation/monitoring/parsing tool 5Vendor: A.L.Lambert 6Name: logtool 7Version: @version@ 8Release: 1 9Copyright: GPL 10Group: Applications/Text 11Source: %{name}-%{version}.tar.gz 12Buildroot: /var/tmp/logtool 13 14%description 15 Logtool is a handy little tool for manipulation/monitoring/parsing 16of syslog (and syslog-like) files. It produces output in ANSI, ASCII, CSV, 17HTML format, and is easily configured to your needs via the /etc/logtool/* 18files. It is suitable for use in generating easy to read logfile reports, 19webpages, and online monitoring of logfiles. 20 21 Please see the included documentation files (which are located in 22/usr/doc/%{name}-%{version}) for more details. 23 24%prep 25%setup 26%build 27# Make sure we clean up anything I might have fscked up and left laying around 28# in the source tree. 29make clean 30# configure for a default install 31./configure 32# build the binaries 33make 34 35%install 36# Until I get the hang of autoconf and friends, the stuff below is the same 37# thing as "make install" taking into account $RPM_BUILD_ROOT 38 39make install DESTDIR=$RPM_BUILD_ROOT 40 41 42%clean 43# blow away the build dir structure 44rm -rf $RPM_BUILD_ROOT 45 46%post 47 48%postun 49 50 51%files 52%defattr(-,root,root) 53%doc README COPYING TODO INSTALL CHANGES USAGE CREDITS logtool.spec doc/* scripts/* 54%config(noreplace) @sysconfdir@/* 55@prefix@/bin/logtool 56@prefix@/man/man1/logtool.1* 57 58 59%changelog 60* Fri Apr 04 2003 A.L.Lambert <al at xjack.org> 61- Fixed some bugs in how duplicate suppression was handled and some misc stuff. 62- it's better - you should upgrade. :) 63 64* Tue Mar 18 2003 A.L.Lambert <al at xjack.org> 65- 1.2.0 is getting ready for initial release! WOOHOO!!!! 66- 67- Still probably a few days away as I write this, but we're about there. 68- 69- Changes are WAY too much to list in total, but a few highlights: 70- Now speaks TAI64 dates (IE: D.J.Bernstien's multilog and friends). 71- Now can optionally suppress duplicate messages. 72- Now can support and colorize unknown logfile formats 73- Now can do really cool things with snort and iptables syslog entries 74- (ip->hostname resolution, special colors, and more!) 75- Now has special options for a syslog-ng formated log. 76- Code architecture is VERY VERY VERY changed and better. 77- Light years better at error handling. 78- Nice facility to write more modules like snort and iptables. 79- Way more efficient (but not faster; too much new processing :) 80- 81- And much much more!!! Try it, you'll like it!! (I hope :) 82 83* Fri Nov 22 2002 A.L.Lambert <max at xjack.org> 84- Returning to active development of logtool to implement a few new ideas I've had. 85- 86- Somewhat major changes; added color options for: 87- Magenta 88- Blue 89- Cyan 90- Bright Cyan 91- 92- Rewrote regex.c a bit to make it easy for future allowances of new REGEX's 93- Minor tweaks and other code stuff. 94- 95- Have begun adding hooks for specialized output modules for known event types 96- (no working code on this front yet). 97- 98- Preparing to write a ncurses module (no code on this fron yet either!) 99 100* Mon Jun 11 2001 A.L.Lambert <max at xjack.org> 101- Minor changes for 1.0.6 release as follows: 102- 103- Modified the autoconf stuff to (hopefully) be more cross-platform 104- 105- Added a fflush(stdin); to make logtool happier with scripts that do 106- line-by-line reading on platforms who's libc doesn't do this automatically 107- for printf(); and friends. 108- 109- Probably a few little things I'm forgetting. :) 110 111 112* Thu Feb 01 2001 A.L.Lambert <al at xjack.org> 113- Tweaked the 1.0.5 release as follows: 114- 115- Added configure.in statements to make ./configure point to the propper 116- paths in the documentation (config file stuff). 117 118* Mon Jan 29 2001 A.L.Lambert <al at xjack.org> 119- 1.0.5 release. Not much new except the following: 120- 121- Now uses GNU autoconf and friends to configure for build 122- Fixes a small compile time bug for ScoUnixware induced in 1.0.4 123- Not much else. :) 124 125* Sat Jan 27 2001 A.L.Lambert <al at xjack.org> 126- 1.0.4 release. Only chage is a modification to the format check to allow 127- for broken-ness in PAM syslog messages on RedHat 7.0 128 129* Wed Jan 16 2001 A.L.Lambert <al at xjack.org> 130- I think I have the configure stuff all tweaked out like it should be. 131- No doubt I'm wrong on that count, but it's getting closer to release grade 132- stuff. 133- 134- Wrote a manpage for logtool. manpages are annoying to write/deal with. 135 136* Sun Jan 14 2001 A.L.Lambert <al at xjack.org> 137- Commenced converting to a GNU autoconf/configure build process for easier 138- cross-platform portability. Hopefully this will make our lives nicer in the 139- long run. 140- 141- This spec file is even built using configure. Isn't that neat. :) 142 143* Thu Jan 11 2001 A.L.Lambert <al at xjack.org> 144- 1.0.4 pre-release started. Hopefully nothing major in this release. 145- 146- First change, modification of the lt_fmtcheck() function to fix some 147- format mismatch problems on RedHat 7.0. See logtool/regex.c for the 148- specifics. (thanks to Laurent Jacquot for pointing this out) 149- 150- Fixed two minor compilation problems on AIX. 151- 1. Getopt returns int, and I was reading it as a char: fixed 152- 2. AIX defines 'regex', which clashed with the struct I will be 153- using to hold regex strings: fixed 154- (thanks to Thanh Ma for pointing these two things out to me) 155 156* Wed Jan 11 2001 A.L.Lambert <al at xjack.org> 157- 1.0.3 release 'officially' declared ready to go. No new changes since 158- the comments below, just some e-mail feedback from the folks testing the 159- changes indicating that everything seems to be working fine. 160- 161 162* Tue Jan 10 2001 A.L.Lambert <al at xjack.org> 163- Updated version to 1.0.3 to reflect changes below. Still waiting to hear 164- back from the folks that are testing these changes. They should work, 165- but until I know for sure, the 1.0.3 release should be considered BETA, and 166- subject to change without version number incrementation prior to public 167- release. 168- 169- Wrote a really ugly configure script to handle the SCO vs everything else 170- differences. (at this point, it just copies the appropo logtail.*.c file to 171- logtail.c, and initializes the main Makefile) 172- 173- Made some changes to the logtool/Makefile to build only the objects/binaries 174- by default (reported problems with OpenBSD 2.8's 'make' not building library 175- correctly). Also added a "make lib" option so that anyone wishing to have 176- the library can build it. (really, who needs the library for this?) 177- 178- Later that night: 179- 180- Ying-Chieh Liao pointed out some "features" in the logtool/Makefile, which 181- I have now fixed. (see, I told you I might change it before the official 182- release) ;) 183- 184- Report from Andreas �stling on the OpenBSD changes looks good. 185- 186- Sanitized e-mail addresses in this file, since it gets displayed on the 187- website (I'd hate to think some spammer snagged the e-mail addresses of 188- the nice folks who've helped me out from my website). 189 190* Fri Jan 05 2001 A.L.Lambert <al at xjack.org> 191- Updated to fix the missing symlink to /usr/bin/lt. 192- Included the changes suggested from Thomas Hagar listed below 193 194* Fri Jan 05 2001 Thomas Hager <thomas at 1012surf.net> 195- replaced cp with install in %install 196 197* Thu Jan 04 2001 A.L.Lambert <al at xjack.org> 198- Various fixes so's it will compile under the original cc-compiler from 199- SUN (Solaris 2.6). Thanks to Christoph Krempe <ck at ub.fu-berlin.de> 200- for pointing out the problems, and working with me on fixes. Christoph 201- should also get credit for pointing out the bug in the includefile 202- functionality that was fixed below. 203- 204- It compiled 205- It worked for me 206- I shipped it. :P 207 208* Fri Dec 29 2000 A.L.Lambert <al at xjack.org> 209- Working on fixes for Solaris (why did I expect this?) for version 1.0.2 210- 211- So far, I've done the following: 212- Tested with removing the strncasecmp() decl - seems to work fine 213- Removed the getopt_long() and related stuff, and use only getopt() 214- 215- Waiting on report back from Christoph Krempe on the success/failure 216- of these steps. 217 218* Thu Dec 28 2000 A.L.Lambert <al at xjack.org> 219- Big OOPS! The includefile functionality was broken! I have no idea how I 220- missed this the first time around, but it's fixed now. Updated version to 221- 1.0.1 222 223* Tue Dec 26 2000 A.L.Lambert <al at xjack.org> 224- Woohoo! 1.0 release is good to go (as far as I can tell)! 225- 226- Documentation is still a bit shabby, but it's better than some I've seen. 227- Still some things in the TODO list that I'd like to get done Real Soon Now. 228- 229- But all in all, all the features are in place, they all work flawlessly as 230- far as I can tell (famous last words of a programmer :), and as they say in 231- GNU land; "It works for me." 232- 233- Later that day: 234- 235- Modified the getopt.c stuff to allow for specification of an alternate 236- config file instead of being stuck with the system defaults. 237- 238- Fixed a minor bug in the ansi.c module (color display thing) 239- 240- Updated CREDITS and a few things in doc/logtool.txt 241 242* Mon Dec 25 2000 A.L.Lambert <al at xjack.org> 243- Now have a working program! WooHoo!! 244- 245- I lied about not messing with it till the 27'th. 246- 247- I think most all of the back-end code is done (cfg file reader, getopt, etc) 248- ANSI, ASCII, RAW, and CSV output modules are completed (more/less), and 249- everything test's OK, even with bizare/broken input. Probably some buffer 250- overlows in here somewhere, but this program is not/will not be SUID, so I 251- don't think that's too big a deal (and will never happen unless users muss 252- up the config file really badly or overdo the REGEX string files). 253- 254- Still TODO 255- Write the HTML <PRE>, and HTML <TABLE> output modules 256- Change the way we do REGEX's (need to compile the paterns once, not 257- every time). 258- Documentation, Documentation, Documentation. :( 259- Clean up the code some more so I won't be quite so embarrassed when I 260- release this thing. :) 261 262* Sun Dec 24 2000 A.L.Lambert <al at xjack.org> 263- Came up with idea, and commenced work on getting this thing ready for 264- distribution 265- Code is about half written at this point, but should progress 266- relatively quickly (I type way too fast). 267- 268- Anciliary stuff (Makefile's, .spec file, etc.) is pretty much done. 269- 270- Documentation is basically un-started (although this program ain't 271- likely to need a rocket scientist to run it). 272- 273- I have to go to bed so's I can be fresh for Christmas, so no more work 274- will likely be getting done until around the 27'th. 275