On Sat, Mar 09, 2002 at 05:11:37PM +0000, Stephen Turner wrote: > On Fri, 8 Mar 2002, Robin Faichney wrote: > > > Due to a formmail.pl exploit, there are some very long lines in my > > site's logfile, and they seem to be causing analog to choke. This is > > 5.0 on Linux (a RaQ3 to be specific). The host hasn't been cooperative > > re deleting the long lines. Is there anything I can do with analog to > > fix this? > > > > Analog should read lines up to 32767 characters -- are your lines really > longer than this? But even past that boundary it shouldn't "choke" (what do > you mean by "choke" anyway?) -- it shoul just ignore the lines.
Sorry, what it's actually saying is that it cannot autodetect the logfile format. What puzzles me is that I don't think the format has actually changed, though of course my assumption that it's the formmail.pl exploit lines that are causing the problem could be wrong -- unfortunately, I didn't note the date of the first error message, and for reasons I won't bore you with, couldn't get access to the server for ages. This is the first line in the file: 63.42.242.74 - - [25/Jan/2002:04:25:39 +0000] "GET /cgi-bin/formmail.pl?recipien [EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],hplumb@ao l.com,[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],sara [EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],doubletmb @aol.com,[EMAIL PROTECTED],[EMAIL PROTECTED]&subject=Project:%20Auto%20generated% 20response,%20prompt%20attention%20is%20required.&[EMAIL PROTECTED] &=Before%20you%20delete%20this%20message%20and%20send%20it%20to%20your%20trash%2 0file,%20I%20urge%20you%20to%20invest%20one%20minute%20of%20your%20life%20and%20 click%20on%20the%20web%20site%20contained%20in%20this%20message.%20%20If%20you%2 0have%20access%20to%20a%20PC%20and%20a%20little%20free%20time,%20you%20can%20dra matically%20change%20your%20life.%20%20No%20boss,%20no%20time%20clock.%20%20Oppo rtunity%20is%20knocking....WILL%20YOU%20ANSWER%20THE%20DOOR?<BR><BR><BR><A%20HRE F%3D"aol:/2000:http:[EMAIL PROTECTED]/~tant/index7.html";>CLICK%20HERE %20FOR%20FINANCIAL%20FREEDOM</A><BR><BR><BR><BR><BR>To%20be%20removed%20from%20f uture%20mailings,%20please%20reply%20with%20"remove"%20in%20the%20subject%20line .<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR>pq1p2c<BR>pq1p2c<BR>pq1p2c<BR></FONT></ HTML>R><BR><BR><BR>To%20be%20removed%20from%20future%20mailings,%20please%20repl y%20with%20"remove"%20in%20the%20subject%20line.<BR><BR><BR><BR><BR><BR><BR><BR> <BR><BR>pq1p2c<BR>pq1p2c<BR>pq1p2c<BR></FONT></HTML> HTTP/1.1" 200 661 "-" "Micr osoft URL Control - 6.00.8862" What do you think? -- Robin Faichney alt.m: "Memes do not exist. Tell everyone you know." inside information -- http://www.ii01.org/ +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
