On Fri, 31 Aug 2007, Walter Ian Kaye wrote:

> >Web server log analysis is a fairly mature field at this point. 
> >AWStats, <http://www.awstats.org/>, another popular open source log 
> >analyzer, has had more recent development effort than Analog. But 
> >even they are running out of features to add and have dramatically 
> >slowed their development efforts.
> 
> I wonder how much of their development is just patching security holes....
> (I had installed AWStats for a user, and then found that it got used 
> to install a spam sender on my server. :/ )

While AWStats produces pretty reports, if you take a look at its source
code (it's written in perl), you'll find that it's just gawd-awful. The
codebase of Analog (admittedly written in C, so requiring more of a 
professional programmer to maintain) was relatively clean the last I 
looked at it, probably back around version 4.

Point being, it wouldn't be surprising to me if AWStats was full of 
holes, though just what type of security holes a log analysis tool could 
expose is unclear to me.

Also, I agree with whomever stated the issue with Analog's configuration 
syntax being confusing. I use analog a lot, but I were to change one 
thing about it, it would be to modify the configuration syntax to be a 
little more consistent and less like a 1980's DOS .bat file.

Just my 2 cents.

-- 
Steve Reppucci                                       [EMAIL PROTECTED] |
Logical Choice Software                          http://logsoft.com/ |
=-=-=-=-=-=-=-=-=-=-  My God!  What have I done?  -=-=-=-=-=-=-=-=-=-=

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to