Re: a good web statistics port?
On Wednesday 02 August 2006 04:48, Jonathan Horne wrote: something other than webalizer? i would really prefer awstats, but its been in command injection limbo forever. can someone recommand something better than webalizer, that is preferrably searchable and sortable, etc etc? thanks in advance, jonathan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] I`m not sure what do You need. May be Analog: http://www.analog.cx/ -- Best regards, Simon Phoenix (Phoenix Lab.) KeyID: 0x2569D30B Fingerprint: 78FC 5C40 07CC D331 148E CC79 84B8 D514 2569 D30B pgpYrFoinYtas.pgp Description: PGP signature
Re: a good web statistics port?
In response to Jonathan Horne [EMAIL PROTECTED]: i would really prefer awstats, but its been in command injection limbo forever. awstats isn't nearly as dangerous as the advisories make it out. The last few security problems only apply to systems where awstats is configured to allow you to updated the statistics from the web browser. This is not the default configuration on FreeBSD. Personally, I don't need up to the minute stats, so all the machines it runs on for me just update it from cron every night. In that configuration, it's not vulnerable to anything. I believe this has been the case with the last 2 or 3 security problems that have been announced for awstats. I'm not aware of any security issues if you have the web-update disabled. -- Bill Moran Collaborative Fusion Inc. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: a good web statistics port?
--On August 1, 2006 8:48:48 PM -0500 Jonathan Horne [EMAIL PROTECTED] wrote: something other than webalizer? i would really prefer awstats, but its been in command injection limbo forever. can someone recommand something better than webalizer, that is preferrably searchable and sortable, etc etc? It's not a port, but.http://awsd.com/scripts/weblog/index.shtml You can go here to see what it looks like in real life - http://www.stovebolt.com/stats/, however, keep in mind, I'm running the 2002 version. (Time to update, I guess.) Paul Schmehl ([EMAIL PROTECTED]) Adjunct Information Security Officer The University of Texas at Dallas http://www.utdallas.edu/ir/security/
