/usr/share/doc/samhain/manual.html/server-status-information.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>The HTML server status page</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="The Samhain Host Integrity Monitoring System"
HREF="index.html"><LINK
REL="UP"
TITLE="Configuring yule, the log server"
HREF="yule.html"><LINK
REL="PREVIOUS"
TITLE="Detecting 'dead' clients"
HREF="gcm.html"><LINK
REL="NEXT"
TITLE="Chroot"
HREF="chroot.html"><LINK
REL="STYLESHEET"
TYPE="text/css"
HREF="./docbook.css"></HEAD
><BODY
CLASS="SECT1"
BGCOLOR="#FFFFFF"
TEXT="#000000"
LINK="#0000FF"
VLINK="#840084"
ALINK="#0000FF"
><!--#if expr="! ($HTTP_USER_AGENT = /MSIE/)"--><!--#include virtual="/resources/ssi/header.html"--><!--#endif --><DIV
CLASS="NAVHEADER"
><TABLE
SUMMARY="Header navigation table"
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TH
COLSPAN="3"
ALIGN="center"
>The Samhain Host Integrity Monitoring System</TH
></TR
><TR
><TD
WIDTH="10%"
ALIGN="left"
VALIGN="bottom"
><A
HREF="gcm.html"
ACCESSKEY="P"
>Prev</A
></TD
><TD
WIDTH="80%"
ALIGN="center"
VALIGN="bottom"
>Chapter 6. Configuring <SPAN
CLASS="APPLICATION"
>yule</SPAN
>, the log server</TD
><TD
WIDTH="10%"
ALIGN="right"
VALIGN="bottom"
><A
HREF="chroot.html"
ACCESSKEY="N"
>Next</A
></TD
></TR
></TABLE
><HR
ALIGN="LEFT"
WIDTH="100%"></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
NAME="SERVER-STATUS-INFORMATION"
>6.8. The HTML server status page</A
></H1
><P
><SPAN
CLASS="APPLICATION"
>yule</SPAN
> writes the current 
status to a HTML file. The default name of this
file is <TT
CLASS="FILENAME"
>samhain.html</TT
>, and by default it is placed in
<TT
CLASS="FILENAME"
>/var/log</TT
>.</P
><P
>The file contains a header with 
the current status of the server (starting time, 
current time, open connections, total connections since start), and a 
table that lists the status of all registered clients.</P
><P
>There are a number of pre-defined events that may occur for a client:</P
><P
></P
><DIV
CLASS="VARIABLELIST"
><DL
><DT
>Inactive</DT
><DD
><P
>     The client has not connected since server startup.
     </P
></DD
><DT
>Started</DT
><DD
><P
>     The client has started. This message may be missing if the 
     client was       
     already running at server startup.
     </P
></DD
><DT
>Exited</DT
><DD
><P
>     The client has exited.
     </P
></DD
><DT
>Message</DT
><DD
><P
>     The client has sent a message.
     </P
></DD
><DT
>File transfer</DT
><DD
><P
>     The client has fetched a file from the server.
     </P
></DD
><DT
>ILLEGAL</DT
><DD
><P
>     Startup without prior exit.                         
     May indicate a preceding abnormal termination.
     </P
></DD
><DT
>PANIC</DT
><DD
><P
>     The client has encountered a fatal error condition.
     </P
></DD
><DT
>FAILED</DT
><DD
><P
>     An unsuccessful attempt to set up a session key     
     or transfer a message.
     </P
></DD
><DT
>POLICY</DT
><DD
><P
>     The client has discovered a policy violation.
     </P
></DD
><DT
>TIME_EXCEEDED</DT
><DD
><P
>     No message (e.g. timestamp) has been received from the client
     for a defined amount of time (default 1 day, option SetClientTimeLimit).
     </P
></DD
></DL
></DIV
><P
>For each client, the latest event of each given type is listed. Events are
sorted by time. Events that have not occurred (yet) are not listed.</P
><P
>It is possible to specify templates for (i) the file header, (ii) a single
table entry, and (iii) the file end.
Templates must be named <TT
CLASS="FILENAME"
>head.html</TT
>, 
<TT
CLASS="FILENAME"
>entry.html</TT
>, and <TT
CLASS="FILENAME"
>foot.html</TT
>,
respectively, and must be located in 
the data directory (i.e. 
<TT
CLASS="FILENAME"
>localstatedir/lib/yule/</TT
>, 
see <A
HREF="paths.html"
>Section A.5</A
>&#62;). 
The distribution package includes two sample files
<TT
CLASS="FILENAME"
>head.html</TT
> and <TT
CLASS="FILENAME"
>foot.html</TT
>.</P
><P
>The following replacements will be made in the head template:</P
><DIV
CLASS="INFORMALTABLE"
><P
></P
><A
NAME="AEN3540"
></A
><TABLE
BORDER="1"
FRAME="border"
CLASS="CALSTABLE"
><COL><COL><THEAD
><TR
><TH
>Placeholder</TH
><TH
>Significance</TH
></TR
></THEAD
><TBODY
><TR
><TD
>%T</TD
><TD
>Current time.</TD
></TR
><TR
><TD
>%S</TD
><TD
>Startup time.</TD
></TR
><TR
><TD
>%L</TD
><TD
>Time of last connection.</TD
></TR
><TR
><TD
>%O</TD
><TD
>Open connections.</TD
></TR
><TR
><TD
>%A</TD
><TD
>Total connections since startup.</TD
></TR
><TR
><TD
>%M</TD
><TD
>Maximum simultaneous connections.</TD
></TR
></TBODY
></TABLE
><P
></P
></DIV
><P
> 
The following replacements will be made in the entry template:</P
><DIV
CLASS="INFORMALTABLE"
><P
></P
><A
NAME="AEN3566"
></A
><TABLE
BORDER="1"
FRAME="border"
CLASS="CALSTABLE"
><COL><COL><THEAD
><TR
><TH
>Placeholder</TH
><TH
>Significance</TH
></TR
></THEAD
><TBODY
><TR
><TD
>%H</TD
><TD
>Host name.</TD
></TR
><TR
><TD
>%S</TD
><TD
>Event.</TD
></TR
><TR
><TD
>%T</TD
><TD
>Time of event.</TD
></TR
></TBODY
></TABLE
><P
></P
></DIV
><DIV
CLASS="TIP"
><P
></P
><TABLE
CLASS="TIP"
WIDTH="100%"
BORDER="0"
><TR
><TD
WIDTH="25"
ALIGN="CENTER"
VALIGN="TOP"
><IMG
SRC="./stylesheet-images/tip.gif"
HSPACE="5"
ALT="Tip"></TD
><TH
ALIGN="LEFT"
VALIGN="MIDDLE"
><B
>Tip</B
></TH
></TR
><TR
><TD
>&nbsp;</TD
><TD
ALIGN="LEFT"
VALIGN="TOP"
><P
>A literal '%' in the HTML output must be represented by 
a '% ' ('%' followed by space) in the template.</P
></TD
></TR
></TABLE
></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
><HR
ALIGN="LEFT"
WIDTH="100%"><TABLE
SUMMARY="Footer navigation table"
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
><A
HREF="gcm.html"
ACCESSKEY="P"
>Prev</A
></TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="index.html"
ACCESSKEY="H"
>Home</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
HREF="chroot.html"
ACCESSKEY="N"
>Next</A
></TD
></TR
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
>Detecting 'dead' clients</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="yule.html"
ACCESSKEY="U"
>Up</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
>Chroot</TD
></TR
></TABLE
></DIV
><!--#if expr="! ($HTTP_USER_AGENT = /MSIE/)"--><!--#include virtual="/resources/ssi/footer.html"--><!--#endif --></BODY
></HTML
>
samhain 3.1.0-5ubuntu1 / usr / share / doc / samhain / manual.html / server-status-information.html
