Re: [U2] File Delete Logging UV
Hi. Maybe it's stupid but, have you antivirus? If yes, check the log messages. Regards, -AA - Original Message - From: "Mac Bhyat" To: Sent: Monday, December 29, 2008 2:46 PM Subject: [U2] File Delete Logging UV Hi, Does anyone know of a way to put file delete logging in place in universe ? We have a VOC file that keeps disappearing from an account, at both a unix and uv level, and I not sure what process is doing it, so I would like to log a delete to a file Thanks Mac -- This message was scanned for spam and viruses by BitDefender. For more information please visit http://linux.bitdefender.com/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] File Delete Logging UV
Mac You can't delete your own VOC file using DELETE.FILE so if it is being done from UniVerse that means it is happening from another account. So you could a) look through other accounts and see if there is a suspicious Q or F pointer to that VOC which might help track down the culprit, or b) wrap the DELETE.FILE command in each of the other accounts so that they are accessed as a Remote item using the security subroutine entry to log the activity. Brian > -Original Message- > From: owner-u2-us...@listserver.u2ug.org > [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of Mac Bhyat > Sent: 30 December 2008 07:48 > To: u2-users@listserver.u2ug.org > Subject: RE: [U2] File Delete Logging UV > > the voc simply vanishes (both DATA and DICT)- as if a > DELETE.FILE were done > > Mac > > -Original Message- > From: owner-u2-us...@listserver.u2ug.org > [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of > dennis bartlett > Sent: 29 December 2008 09:14 PM > To: u2-users@listserver.u2ug.org > Subject: Re: [U2] File Delete Logging UV > > If the deleting process was acting on the &UFD& file, it > could quite happily delete the VOC file, and it would appear > as if the file had been deleted via the operating system as > the usual Universe etc links would still exist. > > I don't think a VOC trigger would be enacted if the &UFD& > entry was deleted. > > Does the file simply vanish, ie there is nothing present at > O/S level, or is the VOC file simply replaced with a previous > version? A write to the &UFD& file would achieve a > replacement, I don't know if the trigger on the VOC file > would fire.. and a simple copy statement to &UFD& would > achieve that write.. > > A possible way would be to poll the &UFD& file with a process > during the day / time period and observe when it occurs. One > process where this would be regularly done is in a program > running a "menu system" . Alternatively, if the VOC entry is > important, one could write it back into the VOC regularly > during the day... just as an interim measure whilst you > search the galaxy for what will turn out to be a simple answer ;-) > > > > 2008/12/29 Scott Ballinger > > > Um, is it the VOC file that is disappearing, or an item in > the VOC file? > > > > /Scott Ballinger > > Pareto Corporation > > Edmonds WA USA > > 206 713 6006 > > > > On Mon, Dec 29, 2008 at 6:24 AM, Jeff Butera > > wrote: > > > > > > > > > Put a DELETE trigger on the VOC file and in the code, > specifically > test > > > for > > > > just the VOC item that keeps getting deleted (i.e. > ignore any others). > > > > When you get a hit, immediately send your self an > E-mail with all > > > > the > > > info > > > > in question. > > > > > > > > Remember that triggers must be globally cataloged, but > that they > > > > can > > call > > > > locally cataloged programs (thus you can have > differences between > > > accounts > > > > by having the subsequent subroutines different between > accounts). > > > > > > > > I hope this helps. > > > > > > I was thinking the same thing, but this doesn't address > the issue if > > > there's an O/S process that's deleting the VOC outside of uv. If > > > the process deleting your VOC is outside of uv, it may be > harder to > > > identify. > > > > > > > > > > > > -- > > > Jeff Butera, Ph.D. > > > Administrative Systems > > > Hampshire College > > > jbut...@hampshire.edu > > > 413-559-5556 > > > > > > "Where I'm from, we believe all sorts of > > >things that aren't true. We call it 'history'." > > > The Wizard, Wicked > > > --- > > > u2-users mailing list > > > u2-users@listserver.u2ug.org > > > To unsubscribe please visit http://listserver.u2ug.org/ > > --- > > u2-users mailing list > > u2-users@listserver.u2ug.org > > To unsubscribe please visit http://listserver.u2ug.org/ > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ > > > -- > This message was scanned for spam and viruses by BitDefender. > For more information please visit http://linux.bitdefender.com/ > > > > __ NOD32 3721 (20081229) Information __ > > This message was checked by NOD32 antivirus system. > http://www.eset.com > > > > > -- > This message was scanned for spam and viruses by BitDefender. > For more information please visit http://linux.bitdefender.com/ > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] File Delete Logging UV
it's the entire VOC file at unix and uv level Mac -Original Message- From: owner-u2-us...@listserver.u2ug.org [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of Scott Ballinger Sent: 29 December 2008 07:21 PM To: u2-users@listserver.u2ug.org Subject: Re: [U2] File Delete Logging UV Um, is it the VOC file that is disappearing, or an item in the VOC file? /Scott Ballinger Pareto Corporation Edmonds WA USA 206 713 6006 On Mon, Dec 29, 2008 at 6:24 AM, Jeff Butera wrote: > > > Put a DELETE trigger on the VOC file and in the code, specifically test > for > > just the VOC item that keeps getting deleted (i.e. ignore any others). > > When you get a hit, immediately send your self an E-mail with all the > info > > in question. > > > > Remember that triggers must be globally cataloged, but that they can call > > locally cataloged programs (thus you can have differences between > accounts > > by having the subsequent subroutines different between accounts). > > > > I hope this helps. > > I was thinking the same thing, but this doesn't address the issue if > there's > an O/S process that's deleting the VOC outside of uv. If the process > deleting your VOC is outside of uv, it may be harder to identify. > > > > -- > Jeff Butera, Ph.D. > Administrative Systems > Hampshire College > jbut...@hampshire.edu > 413-559-5556 > > "Where I'm from, we believe all sorts of >things that aren't true. We call it 'history'." > The Wizard, Wicked > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ -- This message was scanned for spam and viruses by BitDefender. For more information please visit http://linux.bitdefender.com/ __ NOD32 3719 (20081227) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com -- This message was scanned for spam and viruses by BitDefender. For more information please visit http://linux.bitdefender.com/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] File Delete Logging UV
the voc simply vanishes (both DATA and DICT)- as if a DELETE.FILE were done Mac -Original Message- From: owner-u2-us...@listserver.u2ug.org [mailto:owner-u2-us...@listserver.u2ug.org] On Behalf Of dennis bartlett Sent: 29 December 2008 09:14 PM To: u2-users@listserver.u2ug.org Subject: Re: [U2] File Delete Logging UV If the deleting process was acting on the &UFD& file, it could quite happily delete the VOC file, and it would appear as if the file had been deleted via the operating system as the usual Universe etc links would still exist. I don't think a VOC trigger would be enacted if the &UFD& entry was deleted. Does the file simply vanish, ie there is nothing present at O/S level, or is the VOC file simply replaced with a previous version? A write to the &UFD& file would achieve a replacement, I don't know if the trigger on the VOC file would fire.. and a simple copy statement to &UFD& would achieve that write.. A possible way would be to poll the &UFD& file with a process during the day / time period and observe when it occurs. One process where this would be regularly done is in a program running a "menu system" . Alternatively, if the VOC entry is important, one could write it back into the VOC regularly during the day... just as an interim measure whilst you search the galaxy for what will turn out to be a simple answer ;-) 2008/12/29 Scott Ballinger > Um, is it the VOC file that is disappearing, or an item in the VOC file? > > /Scott Ballinger > Pareto Corporation > Edmonds WA USA > 206 713 6006 > > On Mon, Dec 29, 2008 at 6:24 AM, Jeff Butera > wrote: > > > > > > Put a DELETE trigger on the VOC file and in the code, specifically test > > for > > > just the VOC item that keeps getting deleted (i.e. ignore any others). > > > When you get a hit, immediately send your self an E-mail with all the > > info > > > in question. > > > > > > Remember that triggers must be globally cataloged, but that they can > call > > > locally cataloged programs (thus you can have differences between > > accounts > > > by having the subsequent subroutines different between accounts). > > > > > > I hope this helps. > > > > I was thinking the same thing, but this doesn't address the issue if > > there's > > an O/S process that's deleting the VOC outside of uv. If the process > > deleting your VOC is outside of uv, it may be harder to identify. > > > > > > > > -- > > Jeff Butera, Ph.D. > > Administrative Systems > > Hampshire College > > jbut...@hampshire.edu > > 413-559-5556 > > > > "Where I'm from, we believe all sorts of > >things that aren't true. We call it 'history'." > > The Wizard, Wicked > > --- > > u2-users mailing list > > u2-users@listserver.u2ug.org > > To unsubscribe please visit http://listserver.u2ug.org/ > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ -- This message was scanned for spam and viruses by BitDefender. For more information please visit http://linux.bitdefender.com/ __ NOD32 3721 (20081229) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com -- This message was scanned for spam and viruses by BitDefender. For more information please visit http://linux.bitdefender.com/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] File Delete Logging UV
You might want to have a look at OS level tools which will monitor a file in realtime... something like FAM or Tripwire: http://oss.sgi.com/projects/fam/faq.html http://www.blacksheepnetworks.com/security/resources/aix-tripwire.html If you use AIX, it has an auditing subsystem which would probably cover your requirements. http://ps-2.kev009.com:8081/AIXtip/monitor_users.htm http://www.redbooks.ibm.com/abstracts/sg246396.html Regards, Stuart Boydell >-Original Message- >We have a VOC file that keeps disappearing from an account, at both a unix >and uv level, and I not sure what process is doing it, so I would like to >log a delete to a file --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] File Delete Logging UV
If the deleting process was acting on the &UFD& file, it could quite happily delete the VOC file, and it would appear as if the file had been deleted via the operating system as the usual Universe etc links would still exist. I don't think a VOC trigger would be enacted if the &UFD& entry was deleted. Does the file simply vanish, ie there is nothing present at O/S level, or is the VOC file simply replaced with a previous version? A write to the &UFD& file would achieve a replacement, I don't know if the trigger on the VOC file would fire.. and a simple copy statement to &UFD& would achieve that write.. A possible way would be to poll the &UFD& file with a process during the day / time period and observe when it occurs. One process where this would be regularly done is in a program running a "menu system" . Alternatively, if the VOC entry is important, one could write it back into the VOC regularly during the day... just as an interim measure whilst you search the galaxy for what will turn out to be a simple answer ;-) 2008/12/29 Scott Ballinger > Um, is it the VOC file that is disappearing, or an item in the VOC file? > > /Scott Ballinger > Pareto Corporation > Edmonds WA USA > 206 713 6006 > > On Mon, Dec 29, 2008 at 6:24 AM, Jeff Butera > wrote: > > > > > > Put a DELETE trigger on the VOC file and in the code, specifically test > > for > > > just the VOC item that keeps getting deleted (i.e. ignore any others). > > > When you get a hit, immediately send your self an E-mail with all the > > info > > > in question. > > > > > > Remember that triggers must be globally cataloged, but that they can > call > > > locally cataloged programs (thus you can have differences between > > accounts > > > by having the subsequent subroutines different between accounts). > > > > > > I hope this helps. > > > > I was thinking the same thing, but this doesn't address the issue if > > there's > > an O/S process that's deleting the VOC outside of uv. If the process > > deleting your VOC is outside of uv, it may be harder to identify. > > > > > > > > -- > > Jeff Butera, Ph.D. > > Administrative Systems > > Hampshire College > > jbut...@hampshire.edu > > 413-559-5556 > > > > "Where I'm from, we believe all sorts of > >things that aren't true. We call it 'history'." > > The Wizard, Wicked > > --- > > u2-users mailing list > > u2-users@listserver.u2ug.org > > To unsubscribe please visit http://listserver.u2ug.org/ > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] File Delete Logging UV
Um, is it the VOC file that is disappearing, or an item in the VOC file? /Scott Ballinger Pareto Corporation Edmonds WA USA 206 713 6006 On Mon, Dec 29, 2008 at 6:24 AM, Jeff Butera wrote: > > > Put a DELETE trigger on the VOC file and in the code, specifically test > for > > just the VOC item that keeps getting deleted (i.e. ignore any others). > > When you get a hit, immediately send your self an E-mail with all the > info > > in question. > > > > Remember that triggers must be globally cataloged, but that they can call > > locally cataloged programs (thus you can have differences between > accounts > > by having the subsequent subroutines different between accounts). > > > > I hope this helps. > > I was thinking the same thing, but this doesn't address the issue if > there's > an O/S process that's deleting the VOC outside of uv. If the process > deleting your VOC is outside of uv, it may be harder to identify. > > > > -- > Jeff Butera, Ph.D. > Administrative Systems > Hampshire College > jbut...@hampshire.edu > 413-559-5556 > > "Where I'm from, we believe all sorts of >things that aren't true. We call it 'history'." > The Wizard, Wicked > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] File Delete Logging UV
> Put a DELETE trigger on the VOC file and in the code, specifically test for > just the VOC item that keeps getting deleted (i.e. ignore any others). > When you get a hit, immediately send your self an E-mail with all the info > in question. > > Remember that triggers must be globally cataloged, but that they can call > locally cataloged programs (thus you can have differences between accounts > by having the subsequent subroutines different between accounts). > > I hope this helps. I was thinking the same thing, but this doesn't address the issue if there's an O/S process that's deleting the VOC outside of uv. If the process deleting your VOC is outside of uv, it may be harder to identify. -- Jeff Butera, Ph.D. Administrative Systems Hampshire College jbut...@hampshire.edu 413-559-5556 "Where I'm from, we believe all sorts of things that aren't true. We call it 'history'." The Wizard, Wicked --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] File Delete Logging UV
Put a DELETE trigger on the VOC file and in the code, specifically test for just the VOC item that keeps getting deleted (i.e. ignore any others). When you get a hit, immediately send your self an E-mail with all the info in question. Remember that triggers must be globally cataloged, but that they can call locally cataloged programs (thus you can have differences between accounts by having the subsequent subroutines different between accounts). I hope this helps. John Israel --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
