<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3199" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=230144606-14112007><FONT face=Arial
color=#0000ff size=2>thanks..i will touch base with this tomorrow then,..thanks
for your time</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=230144606-14112007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=230144606-14112007><FONT face=Arial
color=#0000ff size=2>Thanks</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=230144606-14112007><FONT face=Arial
color=#0000ff size=2> santhosh.p</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Josh Luthman
[mailto:josh@imaginenetworksllc.com] <BR><B>Sent:</B> Wednesday, November 14,
2007 1:43 AM<BR><B>To:</B> hobbit@hswn.dk<BR><B>Subject:</B> Re: [hobbit] RE:
**Caution-External**: RE: [hobbit] monitoring files and
messages-newbie<BR></FONT><BR></DIV>
<DIV></DIV>Sorry, extremely tired tonight...<BR><BR>ls -ld (you will need the d
to make it ls -l /var itself and not list the contents of it)<BR><BR>
<DIV><SPAN class=gmail_quote>On 11/14/07, <B class=gmail_sendername>Perumal,
Santoshbabu </B><<A
href="mailto:santoshbabu_perumal@platts.com">santoshbabu_perumal@platts.com</A>>
wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<DIV>
<DIV dir=ltr align=left><FONT face=Arial><FONT color=#0000ff><FONT
size=2><STRONG>bash-2.03$ ls -l /var<BR></STRONG>total
90<BR>drwxr-xr-x 2 root
root 512 Jul 6
2005 TT_DB<BR>drwxrwxr-x 9 root
sys 512 Nov 11 03:10
adm<BR>drwxr-xr-x 8 root
bin 512 Jul
6 2005 apache<BR>drwxr-xr-x 2 root
sys 512 Jul
6 2005 audit<BR>drwxr-xr-x 3 root
root 512 Jul 6
2005 crash<BR>drwxr-xr-x 2 root
sys 512 Aug 13
2006 cron<BR>drwxr-xr-x 5 root
sys 512 Jul
6 2005 dmi<BR>drwxrwxr-x 6 root
root 512 Feb 4
2007 dt<BR>drwxr-xr-x 2 root
sys 512 Jul
6 2005 inet<BR>drwxr-xr-x 3 root
bin 512 Nov 12 10:35
ld<BR>drwxr-xr-x 2 root
sys 512 Jul
6 2005 ldap<BR>drwxr-xr-x 2 root
sys 512 Nov 11 03:10
log<BR>drwx------ 2 root
root 8192 Jul 6 2005
lost+found<BR>drwxrwxr-x 3 lp
lp 512 Jul
6 2005 lp<BR>drwxrwxrwt 3 root
mail 512 Nov 13 21:09
mail<BR>drwxr-xr-x 2 root
bin 512 Jul
6 2005 news<BR>drwxr-xr-x 2 root
bin 512 Jul
6 2005 nfs<BR>drwxr-xr-x 2 root
sys 512 Jul
6 2005 nis<BR>drwxr-xr-x 3 root
sys 512 Jul
6 2005 ntp<BR>drwxr-xr-x 3 root
sys 512 Jul
8 2005 opt<BR>drwxrwxrwt 3 root
bin 512 Oct 27
2005 preserve<BR>lrwxrwxrwx 1 root
other 8 Jul
8 2005 rap -> /nsr/rap<BR>drwxr-xr-x 4
root
sys 585 May 24 13:18
run<BR>drwxr-xr-x 11 root
sys 512 Feb
4 2007 sadm<BR>drwxr-xr-x 3 root
bin 512 Jul
6 2005 saf<BR>drwxr-xr-x 3 root
sys 512 Feb
4 2007 snmp<BR>drwxr-xr-x 10 root
bin 512 Jul
6 2005 spool<BR>drwxr-xr-x 4 daemon
daemon 512 Jul 6 2005
statmon<BR>drwxrwxrwt 4 root
sys 1024 Nov 13 21:08
tmp<BR>drwxr-xr-x 7 uucp
uucp 512 Jul 6
2005 uucp<BR>drwxr-xr-x 3 root
bin 512 Jul
6 2005 yp<BR><STRONG>bash-2.03$ ls -l /var/log/<BR></STRONG>total
544<BR>-rw------- 1 root
sys 0
Jul 6 2005 authlog<BR>-rw-r--r-- 1
root other
604 Nov 11 2005 sysidconfig.log<BR>-rwxrwxrwx 1
root other 14500 Nov 13
21:09 syslog<BR>-rw-r--r-- 1 root
other 32465 Nov 10 21:09
syslog.0<BR>-rw-r--r-- 1 root
other 32259 Nov 3 21:09
syslog.1<BR>-rw-r--r-- 1 root
other 32443 Oct 27 21:08
syslog.2<BR>-rw-r--r-- 1 root
other 33041 Oct 20 21:08
syslog.3<BR>-rw-r--r-- 1 root
other 32161 Oct 13 21:11
syslog.4<BR>-rw-r--r-- 1 root
other 31945 Oct 6 21:07
syslog.5<BR>-rw-r--r-- 1 root
other 31492 Sep 29 21:08
syslog.6<BR>-rw-r--r-- 1 root
other 32281 Sep 22 21:08
syslog.7<BR><STRONG>bash-2.03$ ls -l /var/log/syslog.7</STRONG>
<BR>-rw-r--r-- 1 root
other 32281 Sep 22 21:08
/var/log/syslog.7<BR></FONT></FONT></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial><FONT color=#0000ff><FONT
size=2><STRONG>ls -ld /var</STRONG><BR>drwxr-xr-x 32
root
sys 512 Jul
8 2005 /var<BR></FONT></FONT></FONT></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2>all files
are owned by root but others have read permission on all the
files.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2>Thanks</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2>
santhosh.p</FONT> </SPAN></DIV><BR>
<DIV lang=en-us dir=ltr align=left>
<HR>
<FONT face=Tahoma size=2><SPAN class=q><B>From:</B> Josh Luthman [mailto:<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:josh@imaginenetworksllc.com"
target=_blank>josh@imaginenetworksllc.com</A>] <BR></SPAN><B>Sent:</B>
Wednesday, November 14, 2007 1:21 AM<BR><B>To:</B> <A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:hobbit@hswn.dk"
target=_blank>hobbit@hswn.dk</A><BR><B>Subject:</B> Re: [hobbit] RE:
**Caution-External**: RE: [hobbit] monitoring files and
messages-newbie<BR></FONT><BR></DIV>
<DIV><SPAN class=e id=q_1163cdc2421fda07_3>
<DIV></DIV>As an alternative to namei you can do...<BR><BR>ls -l /var<BR>ls -l
/var/log<BR>ls -l /var/log/syslog7<BR><BR>and then give me the print
outs. This will confirm the theory to see if your hobbit can read the
/var/log/syslog7 file or not. <BR><BR>
<DIV><SPAN class=gmail_quote>On 11/14/07, <B class=gmail_sendername>Perumal,
Santoshbabu</B> <<A onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:santoshbabu_perumal@platts.com"
target=_blank>santoshbabu_perumal@platts.com</A>> wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2>hi,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2> i can get output when i execute namei -m command on
linux.out client machine is solaris.when i ecexute your command on client i
am getting command not found error.do we need to have this commad on
clientside to view file contents using hobbit?</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2>Thanks
in advance</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2>Thanks</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2> santhosh.p</FONT></SPAN></DIV><BR>
<DIV lang=en-us dir=ltr align=left>
<HR>
<FONT face=Tahoma size=2><B>From:</B> Perumal, Santoshbabu <BR><B>Sent:</B>
Wednesday, November 14, 2007 1:03 AM<BR><B>To:</B> <A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:hobbit@hswn.dk"
target=_blank>hobbit@hswn.dk</A><BR><B>Subject:</B> **Caution-External**:
RE: [hobbit] monitoring files and messages-newbie<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff
size=2></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2> namei -m
/var/log/syslog7<BR>bash: namei: command not found</FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff
size=2></FONT> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2> i
bit confused .is there any command called namei.when i excute i got the
above commad not found result.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2>Thanks</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2>
santhosh.p</FONT></SPAN></DIV><BR>
<DIV lang=en-us dir=ltr align=left>
<HR>
<FONT face=Tahoma size=2><B>From:</B> Josh Luthman [mailto:<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:josh@imaginenetworksllc.com"
target=_blank>josh@imaginenetworksllc.com</A>] <BR><B>Sent:</B> Wednesday,
November 14, 2007 12:55 AM<BR><B>To:</B> <A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:hobbit@hswn.dk"
target=_blank>hobbit@hswn.dk</A><BR><B>Subject:</B> Re: [hobbit] monitoring
files and messages-newbie<BR></FONT><BR></DIV>
<DIV></DIV><SPAN>Can you please do an namei -m /var/log/syslog7 and then
give us the print out?</SPAN><BR><BR>
<DIV><SPAN class=gmail_quote>On 11/14/07, <B class=gmail_sendername>Perumal,
Santoshbabu</B> <<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:santoshbabu_perumal@platts.com" target=_blank>
santoshbabu_perumal@platts.com</A>> wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<DIV>
<DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff size=2>thanks
for your replies</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2> i can see the file on the gui right
now.but cann not view the contents of the file.if i click it is saying
that unknown filetype(opens small window).can anyone help me on
this</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2> my hobbit-client.cfg file</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN><FONT face=Arial color=#0000ff
size=2> </FONT> <FONT face=Arial color=#0000ff
size=2> HOST=tower<BR>
DISK / 93
98
<BR> PROC cron 1 -1
yellow <BR> PROC
Xvnc 1 120 yellow <BR>
PROC defunct 0 0
red<BR> LOG
/var/adm/messages WARNING
COLOR=yellow<BR> LOG
/var/log/syslog WARNING
COLOR=yellow<BR> DIR %^/var/log
TRACK<BR> FILE /bin/su
md5=c80fc747e24fa8bfa099cbef0bfb926f<BR>
FILE %^/var/log/syslog.* TRACK=maillog</FONT></SPAN></DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff size=2>my client-local.cfg
file</FONT></SPAN></DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff size=2>
[tower]<BR> file:/bin/su:md5<BR> file:`ls -t -1
/var/log/syslog.*|head -1`</FONT></SPAN></DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff size=2>In the gui i can see
/var/log/syslog7 if i click on the file getting unknown filetype
error.cannot able to view the file.please advise if my entries
wrong</FONT></SPAN></DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff
size=2>Thanks</FONT></SPAN></DIV>
<DIV><SPAN><FONT face=Arial color=#0000ff size=2>
santhosh.p</FONT></SPAN></DIV>
<DIV dir=ltr align=left><BR></DIV><BR>
<DIV lang=en-us dir=ltr align=left>
<HR>
<FONT face=Tahoma size=2><B>From:</B> Josh Luthman [mailto:<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:josh@imaginenetworksllc.com"
target=_blank>josh@imaginenetworksllc.com</A>] <BR><B>Sent:</B> Tuesday,
November 13, 2007 10:12 PM<BR><B>To:</B> <A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:hobbit@hswn.dk"
target=_blank>hobbit@hswn.dk</A><BR><B>Subject:</B> Re: [hobbit]
monitoring files and messages<BR></FONT><BR></DIV>
<DIV></DIV>I'm still amazed at how little this command hasn't gotten
around - it is a real beautiful tool!<BR><BR>Try doing a namei -m <FONT
face=Arial size=2><SPAN>/var/adm/sa/sar12 and see if the hobbit user has
the necessary access to read the file (and can execute directories up to
it!) </SPAN></FONT><BR><BR>
<DIV><SPAN class=gmail_quote>On 11/13/07, <B class=gmail_sendername>Paul
Ehrenreich</B> <<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:paulehr@gmail.com" target=_blank>paulehr@gmail.com</A>>
wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">does
the hobbit user have access to the logs and the files?<BR><BR>On Nov 13,
2007 4:53 PM, Steve Holmes <<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:sholmes42@mac.com" target=_blank>sholmes42@mac.com</A>>
wrote:<BR>> Have you also added the required lines to
client-local.cfg?<BR>> Steve.<BR>><BR>><BR>><BR>><BR>>
On Nov 13, 2007 3:48 PM, Perumal, Santoshbabu<BR>> <<A
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:santoshbabu_perumal@platts.com"
target=_blank>santoshbabu_perumal@platts.com</A> > wrote: <BR>>
><BR>> ><BR>> ><BR>> > Hi,<BR>>
> can anyone help me
to monitor files and procs<BR>> ><BR>> > in the
Hobbit-client.cfg file i have mentioned the following entries<BR>>
><BR>> > HOST=tower<BR>> >
FILE /var/adm/sa/sar12<BR>> > LOG
/var/log/syslog WARNING COLOR=yellow<BR>> ><BR>>
><BR>> > but i could not able to see anything on the gui.i can
see white icon if i<BR>> click on this i see no files checked status
and if i click msg icon i cann<BR>> see only /var/adm/messages i
coild not see /var/log/sulog.how can i resolve<BR>> this
problem.please help me on this <BR>> ><BR>> > Thanks in
advance<BR>> ><BR>> ><BR>> ><BR>> ><BR>>
><BR>><BR><BR>To unsubscribe from the hobbit list, send an e-mail
to<BR><A onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:hobbit-unsubscribe@hswn.dk"
target=_blank>hobbit-unsubscribe@hswn.dk</A><BR><BR><BR></BLOCKQUOTE></DIV><BR><BR
clear=all><BR>-- <BR>Josh Luthman<BR>Office: 937-552-2340<BR>Direct:
937-552-2343<BR>1100 Wayne St<BR>Suite 1337<BR>Troy, OH 45373<BR><BR>Those
who don't understand UNIX are condemned to reinvent it, poorly. <BR>---
Henry Spencer </DIV>
<DIV><FONT face=Verdana size=1></FONT>
<DIV style="MARGIN: 0in 0in 0pt; TEXT-ALIGN: center" align=center>
<HR align=center width="100%" SIZE=2>
</DIV>
<P style="MARGIN: 0in 0in 0pt 0.5in"><SPAN style="FONT-SIZE: 10pt"><FONT
face=Verdana size=1><FONT face="Times New Roman">The information contained
in this message is intended only for the recipient, and may be a
confidential attorney-client communication or may otherwise be privileged
and confidential and protected from disclosure. If the reader of this
message is not the intended recipient, or an employee or agent responsible
for delivering this message to the intended recipient, please be aware
that any dissemination or copying of this communication is strictly
prohibited. If you have received this communication in error, please
immediately notify us by replying to the message and deleting it from your
computer. The McGraw-Hill Companies, Inc. reserves the right,
subject to applicable local law, to monitor and review the content of any
electronic message or information sent to or from McGraw-Hill employee
e-mail addresses without informing the sender or recipient of the message.
</FONT></FONT></SPAN></P>
<DIV style="MARGIN: 0in 0in 0pt; TEXT-ALIGN: center" align=center>
<HR align=center width="100%" SIZE=2>
</DIV></DIV></DIV></BLOCKQUOTE></DIV><BR><BR clear=all><BR>-- <BR>Josh
Luthman<BR>Office: 937-552-2340<BR>Direct: 937-552-2343<BR>1100 Wayne
St<BR>Suite 1337<BR>Troy, OH 45373<BR><BR>Those who don't understand UNIX
are condemned to reinvent it, poorly. <BR>--- Henry Spencer
</DIV></BLOCKQUOTE></DIV><BR><BR clear=all><BR>-- <BR>Josh Luthman<BR>Office:
937-552-2340<BR>Direct: 937-552-2343<BR>1100 Wayne St<BR>Suite 1337<BR>Troy,
OH 45373<BR><BR>Those who don't understand UNIX are condemned to reinvent it,
poorly. <BR>--- Henry Spencer </SPAN></DIV></DIV></BLOCKQUOTE></DIV><BR><BR
clear=all><BR>-- <BR>Josh Luthman<BR>Office: 937-552-2340<BR>Direct:
937-552-2343<BR>1100 Wayne St<BR>Suite 1337<BR>Troy, OH 45373<BR><BR>Those who
don't understand UNIX are condemned to reinvent it, poorly. <BR>--- Henry
Spencer </BODY></HTML>