ipaudit-devel — IPAudit developers list

Re: [Ipaudit-devel] (no subject)

[Jon R. <jon...@uc...>]

Do you want to implement the CGI scripts in PHP?  Or all the scripts?

There are about 6 CGI scripts - I don't think it would be too hard to 
translate it to PHP.

- Jon

hari krishna wrote:
> Hi ,
> i think there was an attempt to implement ipaudit in php. can you please 
> help me in this
> 
> 
> ------------------------------------------------------------------------
> The INTERNET now has a personality. YOURS! See your Yahoo! Homepage 
> <http://in.rd.yahoo.com/tagline_yyi_1/*http://in.yahoo.com/>.
> 

[Ipaudit-devel] (no subject)

[hari k. <ha...@ya...>]

Hi ,i think there was an attempt to implement ipaudit in php. can you please help me in this


      The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. http://in.yahoo.com/

Re: [Ipaudit-devel] ipaudit with php frontend

[Jon R. <jon...@uc...>]

Sorry, I don't know of any PHP implementation.

- Jon

hari krishna wrote:
> hi,
> 
> can anyone send me ipaudit done with php..
> 
> 
> Thanks
> 
> 
> ------------------------------------------------------------------------
> The INTERNET now has a personality. YOURS! See your Yahoo! Homepage 
> <http://in.rd.yahoo.com/tagline_yyi_1/*http://in.yahoo.com/>.
> 

[Ipaudit-devel] ipaudit with php frontend

[hari k. <ha...@ya...>]

hi,
can anyone send me ipaudit done with php..

Thanks


      The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. http://in.yahoo.com/

Re: [Ipaudit-devel] problem with ipaudit-web

[Jon R. <jon...@uc...>]

Andrea -

> my problem basically is that when i can access to the report 30 min,
> tell me: No files found.
> Any idea about what could be the problem?

It could be a number of things

(1) Is the ipaudit binary actually running?  Without, there will be no
data.

(2) Is the ipaudit binary running as root or another privileged user so
it can read traffic and write data files?

(3) Is the ipaudit binary listening to an interface with traffic on it?
You might have it listening to an unconnected interface.

(4) Can you find the datafiles?  They should be in
~ipaudit/reports/30min.

Does that help?

- Jon

[Ipaudit-devel] problem with ipaudit-web

[Andrea <paz...@gm...>]

Hi,
I installed the ipaudit-web over a pc with openbsd3.9
my problem basically is that when i can access to the report 30 min, tell
me: No files found.
Any idea about what could be the problem?
thank you so much

pd. sorry my english ;)
                                          Andrea

[Ipaudit-devel] Ipaudit-1.0rc7

[Jon R. <jon...@uc...>]

Greetings.   Just a heads up that I've been (finally) working on getting
a stable ipaudit-1.0 release together.  (This is the binary release, not
ipaudit-web).

Currently I have release candidate 7 (ipaudit-1.0rc7.tar.gz) available
on sourceforge at 

http://prdownloads.sourceforge.net/ipaudit/ipaudit-1.0rc7.tar.gz?download

(the previous 6 release candidates were never actually released).

I've tested this release as well as I know how, I even tried compiling
it on about 8 different platforms on Sourceforge's Compile Farm.  It
compiled on them all (well, all of them which had libpcap installed).

If anyone's interested in downloading it, trying it and letting me know
what you find that would be helpful.

If a couple of weeks go by without any problems being uncovered I'll
make this the final stable release and post an announcment on Freshmeat.

Thanks.

- Jon

[Ipaudit-devel] Development of ipaudit

[Sandro M. <li...@li...>]

Hi all,

 

I've noticed there have been no changes to the ipaudit website in a
looooong time, and no recent posts here.  I just converted my firewall
machine to OpenBSD and I'm having a devilish time getting the most
recent ipaudit-web beta available online to get going and I'm looking at
what I may need to do with the code.  All this got me wondering about if
any development is still going on with this, or if that has ceased.

 

Sincerely,

 

Sandro Mancuso

Only two things are infinite; 

the universe and human stupidity 

and I'm not sure about the former -Albert Einstein

 

li...@li... 

 

[Ipaudit-devel] Ipaudit dying

[Rob C. <kg...@ya...>]

Hello,

I recently installed ipaudit-web to try it out.  After
running overnight, I tried to look at it's reports. 
Some of the reports exist, but many of them do not. 
Also I have been getting this from cron:

/home/ipaudit/ipaudit died prematurely
Warning: empty y range [0:0], adjusting to [-1:1]
Warning: empty y range [0:0], adjusting to [-1:1]
Warning: empty y range [0:0], adjusting to [-1:1]
Warning: empty y range [0:0], adjusting to [-1:1]
Warning: empty y range [0:0], adjusting to [-1:1]
         line 0: all points undefined!

Warning: empty y range [0:0], adjusting to [-1:1]
         line 0: all points undefined!

         line 0: all points undefined!

         line 0: all points undefined!

Does anyone know what might be causing this?  I've
looked at all the permissions and even tried creating
some of the reports manually.  Thank you for your
help.

Rob Campbell
KG6HUM


		
_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush

[Ipaudit-devel] SearchIpauditData patch for last talker

[Chris G. <cm...@do...>]

Hey folks,

IIRC There used to be (atleast in my old SearchIpauditData.pl) a
functionality that would let you search for connections that didn't
have a response.

Anyway, it's not there currently.

I needed this b/c I have a machine trying to talk to a network that
it used to be on and was trying to just see those connections.

--- SearchIpauditData.orig      2004-05-20 12:11:38.000000000 -0400
+++ SearchIpauditData   2004-05-20 12:21:11.000000000 -0400
@@ -467,7 +467,10 @@
                        next if $data[11] ne $search{first_talker};
                }
  
-               if($search{last_talker} ne "any")  {
+               if($search{last_talker} eq "none") {
+                       next unless ($data[7]==0 || $data[8]==0);
+               }
+               elsif($search{last_talker} ne "any")  {
                        next if $data[12] ne $search{last_talker};
                }
  
@@ -765,6 +768,7 @@
 <option  VALUE="any"    $SELECTED{last_talker}{any}    > any
 <option  VALUE="local"  $SELECTED{last_talker}{local}  > local
 <option  VALUE="remote" $SELECTED{last_talker}{remote} > remote
+<option  VALUE="none"   $SELECTED{last_talker}{none}   > none
 </select>
 </td></tr>
 </table>

-- 
Chris Green <cm...@do...>
This is my signature. There are many like it but this one is mine.

[Ipaudit-devel] ipaudit-web "stopped working" after changing ISP

[Sandro M. <li...@li...>]

Greetings,

Obviously with the ISP change, my local IP's and subnet also changed.  
What I can't seem to understand is that since that time the png files 
no longer work.  They exist in /home/ipaudit/public_html/images, but 
they must be corrupt or something because even if I download them via 
FTP, I can't open them.  I've also tried replacing them all with the 
"originals" packaged in the tarball.  When I did that, the sample files 
appeared again, until ipaudit-web updated and they they didn't work 
again.

Does anyone know what can be doing this?  Also, I hardly know how 
gnuplot works, but would it be possible to output gif files rather than 
the png files?  I realize I'd have to make simple changes here and 
there, but that doesn't appear to be a big deal.

On another note, this is hardly important but my ISP caps my bandwidth 
use, so I'd like to change the crontab entry for the monthly to run on 
the day of the month my stats are reset.  Anyone know if something 
somewhere else gets affected if I were to do so?

Thanks in advance for helping,
Sandro

Re: [Ipaudit-devel] merry christmas and a happy new website

[Lina C P. <Lin...@hu...>]

I just got back this afternoon and began the long process of checking my email.  It appears there is some confusion as to the direction of the ipaudit project, which has translated into confusion about the layout of the site.  As of the 2.0 release of ipaudit, (shown in the roadmap), the ipaudit-web project will be deprecated.  What I mean by this is that the ipaudit daemon will have been rewritten in such a way as to allow custom-tailored "ipaudit-web" scripts to be written by individual administrators.  Default scripts will be available, but they will no longer be the focus of the project.  As this is the case, the site was designed to minimalize ipaudit-web and maximize the ipaudit daemon project.

In response to the downloads section being unclear, I am unsure what the difficulty is.  The latest version of ipaudit is clearly stated as downloadable via sourceforge, and the latest ipaudit-web is available under both "Scripts" (on the Downloads page) and via sourceforge.  I guess this is irrelevant anyways, because in accordance with sourceforge regulations we will soon be moving all downloads to the sourceforge ipaudit project page.

I understand that the former IPAudit website has been the way it is for a long time.  However, not all change is bad, and in my opinion, change that brings a project (or its website) better in accordance with standards is positive, especially in the world of computers.  For those of you opposed to change, the IPAudit-1.0 release will be in the format you are familiar with, and it is our hope that older versions of IPAudit will continue to be supported even after the 2.0 release.

Hope you all had a happy New Year.

Sincerely,

Lina
----- Original Message -----
From: Mian H Khalil <Has...@hu...>
Date: Monday, December 29, 2003 0:03 am
Subject: Re: [Ipaudit-devel] merry christmas and a happy new website

> Chris: My mistake; my reply below should have been sent to the 
> entire list.
> Jon: Would you clarify on the IPAudit-Web situation as outlined in 
> my reply below?
> 
> Regards,
> 	Hasan
> 
> --
> 
> May God shower His peace and blessings unto you.
> 
> ----- Original Message -----
> From: Chris Green <cm...@do...>
> Date: Sunday, December 28, 2003 10:51 pm
> Subject: Re: [Ipaudit-devel] merry christmas and a happy new website
> 
> > you only replied to me.  So I'm leaving the reply intact without
> > chopping it apart and doing the reply at top format rather than
> > inline.
> > 
> > It really bothers me that the website was redesigned ( and we're
> > splitting hairs over graphics and general statistics on a project 
> that> does not appeal to a majority user... ) when the content isn't
> > understood.
> > 
> > Oh well, back into the wordwork. 
> > 
> > Mian H Khalil <Has...@hu...> writes:
> > 
> > > Chris,
> > 
> > > 	You are absolutely correct; IPAudit-Web is in fact one of
> > > those top-left sidebar sites, which is not congruent with the new
> > > IPAudit site layout. The reason a top-left sidebar layout works 
> well> > for the IPAudit-Web site is that (a) the header is 
> relatively small,
> > > unintrusive, and center-aligned, and (b) the left sidebar is
> > > unintrusive. By unintrusive, I mean specifically, in this case, 
> that> > the font is small and there are no images that draw particular
> > > attention.
> > >
> > > 	The sidebar is not present on any pages with no child
> > > links. If the majority would like this changed, please let us
> > > know. Lina and I discussed adding the sidebar to all pages and 
> > decided> against it because of the feeling of unnecessary clutter 
> > it brought to
> > > the site. We keep regularity throughout the site by placing the
> > > sidebar on all pages with no child links. Perhaps you would be 
> more> > satisfied with the 'Related' text changed to something more 
> > indicitave> of child pages? I feel that this may make a positive 
> > difference to the
> > > site. Suggestions, anyone?
> > >
> > > 	Most internet users today do not have a scroll wheel on their
> > > mouse, as of 2003 W3C surveys. Chris Meyer, a design expert, notes
> > > that scrolling should be avoided because of this. Regardless of 
> the> > fact that this statistic is changing rapidly, I feel that 
> the design
> > > principles applied to the site should be those built on majority
> > > statistics, rather than speculation statistics. If there are 
> any 
> > parts> of the site that the majority feel should be combined into 
> > one page,
> > > please let us know.
> > >
> > > 	Because I have not touched the IPAudit-Web package at all, I
> > > know nothing about what version of IPAudit need be used with 
> it. 
> > I am
> > > not responsible for any IPAudit-Web development as far as I
> > > know. Chris: if you know this for certain, please let me know
> > > immediately (you asked it as a question, so if you're certain just
> > > drop me a line and I'll fix the site). Otherwise, Jon: would you
> > > clarify on this? I will make changes to the site as soon as
> > > clarification is given.
> > >
> > > Thanks,
> > > 	Hasan
> > >
> > >
> > > May God shower His peace and blessings unto you.
> > >
> > > ----- Original Message ----- From: Chris Green <cm...@do...> Date:
> > > Saturday, December 27, 2003 8:56 pm Subject: Re: [Ipaudit-
> devel] 
> > merry> christmas and a happy new website
> > >
> > >> Mian H Khalil <Has...@hu...> writes:
> > >> 
> > >> >  Neither Lina nor myself felt that we wanted to continue that
> > >> > trend, which, from a graphic design point of view is not
> > >> > optimal. So to answer your question, yes it is possible, but I
> > >> > don't foresee it being done anytime soon. Nevertheless, if 
> we get
> > >> > numerous complaints on the user-level from this, IE non
> > >> > developmental staff, then we will reconsider.
> > >>  ipaudit-web is one of those top-left sidebar designs so 
> > clicking on
> > >> screenshots makes the eye retrain with each click.  Please don't
> > >> take this as a suggestion to redesign ipaudit-web.
> > >> 
> > >> Since we're getting into human feel, a sidebar where the related
> > >> pages for one section will link to another page with no related
> > >> pages provides a faux navigation.
> > >> 
> > >> Eg: http://ipaudit.sourceforge.net/documentation/index.html has
> > >> related links to how it works... but the
> > >> http://ipaudit.sourceforge.net/documentation/howItWorks.html 
> isn't> >> related to the man pages.
> > >> 
> > >> > By tailoring the content to graphic design standards, rather 
> than> >> > development standards, we aim to provide a site that is 
> more> >> > easily navigated by all, including but not limited to 
> developers.> >>  If there were 100s of pages of content, dividing
> > >> upcompartementalization makes sense.
> > >> 
> > >> I'm in favor of having something meaningful to not use the scroll
> > >> functionality for the initial page load to make sense.
> > >> 
> > >> However, scrolling is a very cheap user operation with 
> mousewheels> >> but clicking with the foward/back button forces the 
> user to 
> > maintain>> lots of navigational state.
> > >> 
> > >> The more I click a mouse, the more likely my hand pains are to 
> > flare>> up.  That's a hard thing to think about when designing a 
> > web site.
> > >> 
> > >> Biggest Nit: Isn't the right ipaudit for people to be using 
> the one
> > >> that's shipped as a part of ipaudit-web?  Neither the main 
> page or
> > >> the ipaudit-web page or downloads page indicate thtat ipaudit is
> > >> part of ipaudit web and you really only need 1.
> > >> 
> > >> Cheers, Chris -- Chris Green <cm...@do...> "Yeah, but you're 
> taking> >> the universe out of context."
> > >> 
> > 
> > -- 
> > Chris Green <cm...@do...>
> > I have no ability to read string handling code in a gaim window
> > 
> > 
> > -------------------------------------------------------
> > This SF.net email is sponsored by: IBM Linux Tutorials.
> > Become an expert in LINUX or just sharpen your skills.  Sign up 
> for 
> > IBM'sFree Linux Tutorials.  Learn everything from the bash shell 
> to 
> > sys admin.
> > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> > _______________________________________________
> > Ipaudit-devel mailing list
> > Ipa...@li...
> > https://lists.sourceforge.net/lists/listinfo/ipaudit-devel
> > 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for 
> IBM'sFree Linux Tutorials.  Learn everything from the bash shell to 
> sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Ipaudit-devel mailing list
> Ipa...@li...
> https://lists.sourceforge.net/lists/listinfo/ipaudit-devel
> 

Re: [Ipaudit-devel] merry christmas and a happy new website

[Mian H K. <Has...@hu...>]

Chris: My mistake; my reply below should have been sent to the entire list.
Jon: Would you clarify on the IPAudit-Web situation as outlined in my reply below?

Regards,
	Hasan

--

May God shower His peace and blessings unto you.

----- Original Message -----
From: Chris Green <cm...@do...>
Date: Sunday, December 28, 2003 10:51 pm
Subject: Re: [Ipaudit-devel] merry christmas and a happy new website

> you only replied to me.  So I'm leaving the reply intact without
> chopping it apart and doing the reply at top format rather than
> inline.
> 
> It really bothers me that the website was redesigned ( and we're
> splitting hairs over graphics and general statistics on a project that
> does not appeal to a majority user... ) when the content isn't
> understood.
> 
> Oh well, back into the wordwork. 
> 
> Mian H Khalil <Has...@hu...> writes:
> 
> > Chris,
> 
> > 	You are absolutely correct; IPAudit-Web is in fact one of
> > those top-left sidebar sites, which is not congruent with the new
> > IPAudit site layout. The reason a top-left sidebar layout works well
> > for the IPAudit-Web site is that (a) the header is relatively small,
> > unintrusive, and center-aligned, and (b) the left sidebar is
> > unintrusive. By unintrusive, I mean specifically, in this case, that
> > the font is small and there are no images that draw particular
> > attention.
> >
> > 	The sidebar is not present on any pages with no child
> > links. If the majority would like this changed, please let us
> > know. Lina and I discussed adding the sidebar to all pages and 
> decided> against it because of the feeling of unnecessary clutter 
> it brought to
> > the site. We keep regularity throughout the site by placing the
> > sidebar on all pages with no child links. Perhaps you would be more
> > satisfied with the 'Related' text changed to something more 
> indicitave> of child pages? I feel that this may make a positive 
> difference to the
> > site. Suggestions, anyone?
> >
> > 	Most internet users today do not have a scroll wheel on their
> > mouse, as of 2003 W3C surveys. Chris Meyer, a design expert, notes
> > that scrolling should be avoided because of this. Regardless of the
> > fact that this statistic is changing rapidly, I feel that the design
> > principles applied to the site should be those built on majority
> > statistics, rather than speculation statistics. If there are any 
> parts> of the site that the majority feel should be combined into 
> one page,
> > please let us know.
> >
> > 	Because I have not touched the IPAudit-Web package at all, I
> > know nothing about what version of IPAudit need be used with it. 
> I am
> > not responsible for any IPAudit-Web development as far as I
> > know. Chris: if you know this for certain, please let me know
> > immediately (you asked it as a question, so if you're certain just
> > drop me a line and I'll fix the site). Otherwise, Jon: would you
> > clarify on this? I will make changes to the site as soon as
> > clarification is given.
> >
> > Thanks,
> > 	Hasan
> >
> >
> > May God shower His peace and blessings unto you.
> >
> > ----- Original Message ----- From: Chris Green <cm...@do...> Date:
> > Saturday, December 27, 2003 8:56 pm Subject: Re: [Ipaudit-devel] 
> merry> christmas and a happy new website
> >
> >> Mian H Khalil <Has...@hu...> writes:
> >> 
> >> >  Neither Lina nor myself felt that we wanted to continue that
> >> > trend, which, from a graphic design point of view is not
> >> > optimal. So to answer your question, yes it is possible, but I
> >> > don't foresee it being done anytime soon. Nevertheless, if we get
> >> > numerous complaints on the user-level from this, IE non
> >> > developmental staff, then we will reconsider.
> >>  ipaudit-web is one of those top-left sidebar designs so 
> clicking on
> >> screenshots makes the eye retrain with each click.  Please don't
> >> take this as a suggestion to redesign ipaudit-web.
> >> 
> >> Since we're getting into human feel, a sidebar where the related
> >> pages for one section will link to another page with no related
> >> pages provides a faux navigation.
> >> 
> >> Eg: http://ipaudit.sourceforge.net/documentation/index.html has
> >> related links to how it works... but the
> >> http://ipaudit.sourceforge.net/documentation/howItWorks.html isn't
> >> related to the man pages.
> >> 
> >> > By tailoring the content to graphic design standards, rather than
> >> > development standards, we aim to provide a site that is more
> >> > easily navigated by all, including but not limited to developers.
> >>  If there were 100s of pages of content, dividing
> >> upcompartementalization makes sense.
> >> 
> >> I'm in favor of having something meaningful to not use the scroll
> >> functionality for the initial page load to make sense.
> >> 
> >> However, scrolling is a very cheap user operation with mousewheels
> >> but clicking with the foward/back button forces the user to 
> maintain>> lots of navigational state.
> >> 
> >> The more I click a mouse, the more likely my hand pains are to 
> flare>> up.  That's a hard thing to think about when designing a 
> web site.
> >> 
> >> Biggest Nit: Isn't the right ipaudit for people to be using the one
> >> that's shipped as a part of ipaudit-web?  Neither the main page or
> >> the ipaudit-web page or downloads page indicate thtat ipaudit is
> >> part of ipaudit web and you really only need 1.
> >> 
> >> Cheers, Chris -- Chris Green <cm...@do...> "Yeah, but you're taking
> >> the universe out of context."
> >> 
> 
> -- 
> Chris Green <cm...@do...>
> I have no ability to read string handling code in a gaim window
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for 
> IBM'sFree Linux Tutorials.  Learn everything from the bash shell to 
> sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Ipaudit-devel mailing list
> Ipa...@li...
> https://lists.sourceforge.net/lists/listinfo/ipaudit-devel
> 

Re: [Ipaudit-devel] merry christmas and a happy new website

[Mian H K. <Has...@hu...>]

Jon,
	Is this my queue to add the associated notices to all of the source code? Or will someone else take care of that? If so, just let me know which files should be exempted of the GPL notice, and I'll apply it to the rest. Otherwise, go ahead and take care of it. A final question remains if there is to be any modification to the source files that does not affect the compiled binaries: should we publish the new code in a release tarball, or should we leave it for the 1.0 release?

Regards,
	Hasan

May God shower His peace and blessings unto you.

----- Original Message -----
From: Jon Rifkin <jon...@uc...>
Date: Sunday, December 28, 2003 3:25 pm
Subject: Re: [Ipaudit-devel] merry christmas and a happy new website

> 
> > The project itself I believe is owned by Jon Rifkin. Perhaps we 
> can clarify this, 
> > Jon? Licensing is most likely going to be an issue if/when this 
> project gets any larger
> > I understand that the project is under the GPL, but I have not fully
> > researched it, and will do so soon.
> 
> When I started with the ipaudit binary I pretty much cut and pasted 
> the GPL notice
> into the code, and inserted my name in the obvious place.  I 
> haven't paid alot of attention
> to it since.
> 
> A quick scan of the source code shows that only the C source files 
> ipaudit.c, hash.c and 
> ipstrings.c carry the notice.  None of the C headers nor the 
> various Perl and Shell scripts
> carry the notice.
> 
> > The project itself I believe is owned by Jon Rifkin.
> I wonder if the 'project' can be copyrighted - my guess is only that
> individual code sources and documentation can be copyrighted, but of
> course (he said with misplaced pride) IANAL.
> 
> I suspect it would be a 'good idea' to put the GPL notice into most or
> all of the documentation and program files, excepting some small 
> scriptswhich are about as large as the GPL notice itself.
> 
> 
> - Jon
> 
> 
> 

Re: [Ipaudit-devel] merry christmas and a happy new website

[Chris G. <cm...@do...>]

you only replied to me.  So I'm leaving the reply intact without
chopping it apart and doing the reply at top format rather than
inline.

It really bothers me that the website was redesigned ( and we're
splitting hairs over graphics and general statistics on a project that
does not appeal to a majority user... ) when the content isn't
understood.

Oh well, back into the wordwork. 

Mian H Khalil <Has...@hu...> writes:

> Chris,

> 	You are absolutely correct; IPAudit-Web is in fact one of
> those top-left sidebar sites, which is not congruent with the new
> IPAudit site layout. The reason a top-left sidebar layout works well
> for the IPAudit-Web site is that (a) the header is relatively small,
> unintrusive, and center-aligned, and (b) the left sidebar is
> unintrusive. By unintrusive, I mean specifically, in this case, that
> the font is small and there are no images that draw particular
> attention.
>
> 	The sidebar is not present on any pages with no child
> links. If the majority would like this changed, please let us
> know. Lina and I discussed adding the sidebar to all pages and decided
> against it because of the feeling of unnecessary clutter it brought to
> the site. We keep regularity throughout the site by placing the
> sidebar on all pages with no child links. Perhaps you would be more
> satisfied with the 'Related' text changed to something more indicitave
> of child pages? I feel that this may make a positive difference to the
> site. Suggestions, anyone?
>
> 	Most internet users today do not have a scroll wheel on their
> mouse, as of 2003 W3C surveys. Chris Meyer, a design expert, notes
> that scrolling should be avoided because of this. Regardless of the
> fact that this statistic is changing rapidly, I feel that the design
> principles applied to the site should be those built on majority
> statistics, rather than speculation statistics. If there are any parts
> of the site that the majority feel should be combined into one page,
> please let us know.
>
> 	Because I have not touched the IPAudit-Web package at all, I
> know nothing about what version of IPAudit need be used with it. I am
> not responsible for any IPAudit-Web development as far as I
> know. Chris: if you know this for certain, please let me know
> immediately (you asked it as a question, so if you're certain just
> drop me a line and I'll fix the site). Otherwise, Jon: would you
> clarify on this? I will make changes to the site as soon as
> clarification is given.
>
> Thanks,
> 	Hasan
>
>
> May God shower His peace and blessings unto you.
>
> ----- Original Message ----- From: Chris Green <cm...@do...> Date:
> Saturday, December 27, 2003 8:56 pm Subject: Re: [Ipaudit-devel] merry
> christmas and a happy new website
>
>> Mian H Khalil <Has...@hu...> writes:
>> 
>> >  Neither Lina nor myself felt that we wanted to continue that
>> > trend, which, from a graphic design point of view is not
>> > optimal. So to answer your question, yes it is possible, but I
>> > don't foresee it being done anytime soon. Nevertheless, if we get
>> > numerous complaints on the user-level from this, IE non
>> > developmental staff, then we will reconsider.
>>  ipaudit-web is one of those top-left sidebar designs so clicking on
>> screenshots makes the eye retrain with each click.  Please don't
>> take this as a suggestion to redesign ipaudit-web.
>> 
>> Since we're getting into human feel, a sidebar where the related
>> pages for one section will link to another page with no related
>> pages provides a faux navigation.
>> 
>> Eg: http://ipaudit.sourceforge.net/documentation/index.html has
>> related links to how it works... but the
>> http://ipaudit.sourceforge.net/documentation/howItWorks.html isn't
>> related to the man pages.
>> 
>> > By tailoring the content to graphic design standards, rather than
>> > development standards, we aim to provide a site that is more
>> > easily navigated by all, including but not limited to developers.
>>  If there were 100s of pages of content, dividing
>> upcompartementalization makes sense.
>> 
>> I'm in favor of having something meaningful to not use the scroll
>> functionality for the initial page load to make sense.
>> 
>> However, scrolling is a very cheap user operation with mousewheels
>> but clicking with the foward/back button forces the user to maintain
>> lots of navigational state.
>> 
>> The more I click a mouse, the more likely my hand pains are to flare
>> up.  That's a hard thing to think about when designing a web site.
>> 
>> Biggest Nit: Isn't the right ipaudit for people to be using the one
>> that's shipped as a part of ipaudit-web?  Neither the main page or
>> the ipaudit-web page or downloads page indicate thtat ipaudit is
>> part of ipaudit web and you really only need 1.
>> 
>> Cheers, Chris -- Chris Green <cm...@do...> "Yeah, but you're taking
>> the universe out of context."
>> 

-- 
Chris Green <cm...@do...>
I have no ability to read string handling code in a gaim window

Re: [Ipaudit-devel] merry christmas and a happy new website

[Chris G. <cm...@do...>]

Mian H Khalil <Has...@hu...> writes:

>  Neither Lina nor myself felt that we wanted to continue that trend,
> which, from a graphic design point of view is not optimal. So to
> answer your question, yes it is possible, but I don't foresee it
> being done anytime soon. Nevertheless, if we get numerous complaints
> on the user-level from this, IE non developmental staff, then we
> will reconsider.

ipaudit-web is one of those top-left sidebar designs so clicking on
screenshots makes the eye retrain with each click.  Please don't take
this as a suggestion to redesign ipaudit-web.

Since we're getting into human feel, a sidebar where the related pages
for one section will link to another page with no related pages
provides a faux navigation.

Eg: http://ipaudit.sourceforge.net/documentation/index.html has
related links to how it works... but the
http://ipaudit.sourceforge.net/documentation/howItWorks.html isn't
related to the man pages.

> By tailoring the content to graphic design standards, rather than
> development standards, we aim to provide a site that is more easily
> navigated by all, including but not limited to developers.

If there were 100s of pages of content, dividing upcompartementalization makes
sense.  

I'm in favor of having something meaningful to not use the scroll
functionality for the initial page load to make sense.

However, scrolling is a very cheap user operation with mousewheels but
clicking with the foward/back button forces the user to maintain lots
of navigational state.

The more I click a mouse, the more likely my hand pains are to flare
up.  That's a hard thing to think about when designing a web site.

Biggest Nit: Isn't the right ipaudit for people to be using the one
that's shipped as a part of ipaudit-web?  Neither the main page or the
ipaudit-web page or downloads page indicate thtat ipaudit is part of
ipaudit web and you really only need 1.

Cheers,
Chris
-- 
Chris Green <cm...@do...>
"Yeah, but you're taking the universe out of context."

Re: [Ipaudit-devel] merry christmas and a happy new website

[Mian H K. <Has...@hu...>]

Chris,

	The copyright notices on each of the pages refer to the HTML, under Clinton's Internet Privacy whatever act from 1996 or 1994 or whatever it was. The project itself I believe is owned by Jon Rifkin. Perhaps we can clarify this, Jon? Licensing is most likely going to be an issue if/when this project gets any larger. I understand that the project is under the GPL, but I have not fully researched it, and will do so soon.

	The sidebar is on the right side for two reasons. Firstly, according to design principles studied by myself, a sidebar on the right side of the page does a better job of focusing the human eye on the center of the page, seeing as how the logo is on the left, and that the logo extends over the navigation bar and slightly into the body of the page (this overflow is on the left). To summarize, having the related links on the right side brings more balance to the page. Secondly, we all have to admit. The design of most pages on the internet are a top-bar, left-bar, right-body setup. Neither Lina nor myself felt that we wanted to continue that trend, which, from a graphic design point of view is not optimal. So to answer your question, yes it is possible, but I don't foresee it being done anytime soon. Nevertheless, if we get numerous complaints on the user-level from this, IE non developmental staff, then we will reconsider.

	We expended some effort in making the site larger than it really needed to be to fulfill several other graphic design principles. The first main one being that when people view a web page, over 99% of internet users do not actually see anything which requires them to use the scroll function on their browser (or, as graphic designers refer to it, below the 'fold'). The second main principle we tried to meet was conciseness. We tried to maintain most of the content in non-paragraph form (IE break it up with lots of headings) and provide links (which are, statistically, the most read text) that describe the link, rather than where the link is (you will see no 'click here' on the site). By tailoring the content to graphic design standards, rather than development standards, we aim to provide a site that is more easily navigated by all, including but not limited to developers.

	Thank you for your comments and suggestions.

I hope you all had a lovely christmas,
	Hasan Khalil

P.S. Lina will be on vacation until next monday, the 5th of January. If anyone would like me to bring up design principles or anything else with her, it'll have to wait until she's back. I apologize for the inconvenience.


May God shower His peace and blessings unto you.

----- Original Message -----
From: Chris Green <cm...@do...>
Date: Saturday, December 27, 2003 9:53 am
Subject: Re: [Ipaudit-devel] merry christmas and a happy new website

> Lina C Pezzella <Lin...@hu...> writes:
> 
> >
> > P.S.  If there's anything we missed, just email us back and we'll
> > get it up asap.
> 
> What are the copyright notices on the main page referring to?  The
> HTML itself?  Do you all actually own the copyright or does uconn?
> 
> Would it be possible to put the sidebar on the left side rather than
> the right?
> 
> It's also probably worthwhile to try and condense the number of pages
> that exist to include all the information there just not
> compartmentalized so heavily.
> 
> Looks fancy otherwise :)
> 
> Cheers,
> Chris
> -- 
> Chris Green <cm...@do...>
> Eschew obfuscation.
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for 
> IBM'sFree Linux Tutorials.  Learn everything from the bash shell to 
> sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Ipaudit-devel mailing list
> Ipa...@li...
> https://lists.sourceforge.net/lists/listinfo/ipaudit-devel
> 

Re: [Ipaudit-devel] merry christmas and a happy new website

[Chris G. <cm...@do...>]

Lina C Pezzella <Lin...@hu...> writes:

>
> P.S.  If there's anything we missed, just email us back and we'll
> get it up asap.

What are the copyright notices on the main page referring to?  The
HTML itself?  Do you all actually own the copyright or does uconn?

Would it be possible to put the sidebar on the left side rather than
the right?

It's also probably worthwhile to try and condense the number of pages
that exist to include all the information there just not
compartmentalized so heavily.

Looks fancy otherwise :)

Cheers,
Chris
-- 
Chris Green <cm...@do...>
Eschew obfuscation.

[Ipaudit-devel] Updates to project trackers

[Mian H K. <Has...@hu...>]

Hello all,

	I hope this note reaches all of you in good health and holiday spirits.

	I am currently going through the project page and updating as many things as I can. The project description, for example, will be updated soon to reflect new project goals. I plan to utilize as much of SourceForge's resource as is possible.

	I have updated each of the four requests in the feature request tracker system on SourceForge. I have assigned request #855275 (TOS field in output) to myself and Lina, as we should be able to take care of that with version 2.0. I have changed the status of request #685648 (e-mail notification on thresholds) to 'pending' as this is one of the goals for version 2.0.

	I have assigned requests #693287 (Legend on Busies Local Hosts Graph) and #686074 (Some ideas for helping IPAudit) to Jon because they deal with IPAudit-Web, which seems to be Jon's domain. If IPAudit-Web is to be maintained after IPAudit 2.0 (as a courtesy to people who still use IPAudit 1.0), I feel that feature requests should be taken into account. If IPAudit-Web is not to be maintained after IPAudit 2.0, then the request should be taken care of by myself and Lina, as it is under the teir three domain (according to the roadmap), which has been assigned to us. Jon, it's your call now; if you feel that Lina and I should take care of it with 2.0, then reassign it to us; if you feel that you can handle the changes, then take care of what you need to with IPAudit-Web; if you just don't feel like doing it, then reassign it to us. Whatever works for you works for me.

	Before I continue going through the rest of the trackers (Bugs, Support Requests, and Patches remain untouched), I ask that Jon and JH go through them and mark what they can as they see fit. Please claim anything that you think you can take care of, so that Lina and I know what we need to take care of out of there.

	I welcome any criticism. Please let me know if I'm doing something you dislike.

Happy holidays,
	Hasan Khalil

--

May God shower His blessings and peace unto you.

Re: [Ipaudit-devel] merry christmas and a happy new website

[Jon R. <jon...@uc...>]

Hasan, Lina -

Thanks so much.  I think the new pages look really *great*.

About hosting the files on sf.  I've originally was going to place
the new release 1.0BETA8 using the sourceforge release system, but it
doesn't give you alot of info about how the release is being downloaded,
so I've put it on my desktop for now.  I've found from the Apache log
that that since late Dec 15 before midnight, the release has been
downloaded to 142 unique ip addresses. About 11 of these went to
universities.  The rest seemed to go to companies and ISP end users.

Thanks again.

- Jon


On Tue, 2003-12-23 at 00:09, Lina C Pezzella wrote:
> Merry Christmas everyone.  The new ipaudit website can be found at the normal location. (http://ipaudit.sf.net)  Hope you all like it.  All backlogged releases of ipaudit have been have been made available via the sourceforge file release system.  In the near future, we will be removing them from the ipaudit.sf.net site as per sourceforge regulations.
> 
> Happy Holidays,
> 
> Hasan Khalil && Lina Pezzella
> 
> P.S.  If there's anything we missed, just email us back and we'll get it up asap.
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
> Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Ipaudit-devel mailing list
> Ipa...@li...
> https://lists.sourceforge.net/lists/listinfo/ipaudit-devel

[Ipaudit-devel] merry christmas and a happy new website

[Lina C P. <Lin...@hu...>]

Merry Christmas everyone.  The new ipaudit website can be found at the normal location. (http://ipaudit.sf.net)  Hope you all like it.  All backlogged releases of ipaudit have been have been made available via the sourceforge file release system.  In the near future, we will be removing them from the ipaudit.sf.net site as per sourceforge regulations.

Happy Holidays,

Hasan Khalil && Lina Pezzella

P.S.  If there's anything we missed, just email us back and we'll get it up asap.

[Ipaudit-devel] ipaudit-web-1.0BETA8 released

[Jon R. <jon...@uc...>]

Greetings -

The ipaudit-web home page
   http://ipaudit.sf.net/ipaudit-web
now links to the latest beta 1.0BETA8. 
FWIW, this tarball itself is now distributed 
using sourceforge's file release system.

I'll post a notice to freshmeat in a day or two.

- Jon

[Ipaudit-devel] My Ipaudit-web short term goals.

[Jon R. <jon...@uc...>]

Greetings again :)

Once ipaudit-web-1.0BETA8 looks OK, I'd like to call it the real thing
and then think about the next step.

Here's how it looks to me.

I think I'd like to create an ipaudit-web version 1.2 that uses a
single ipaudit daemon that writes statistics every 30min rather then the
cron scripts we currently use that start a new ipaudit process every 30
minutes.

Toward that end, I've already added and committed to ipaudit
(1) a daemon mode that spawns children every 30 minutes to read and
record network traffic, and as requested by folks on this list,
(2) a setuid() function so that ipaudit daemon can run as root and its
children as the ipaudit user (analogous to apache)
(3) a chroot() function to implement.

The next part is to port the cron scripts to this new environment.

And, once this version 1.2 is completed, I was thinking it would be a
good time to consolidate the separate ipaudit (the original package
which includes only the binaries and has been neglected for awhile) and
ipaudit-web distributions into one package.

After that, I'd like to turn my attention to the goals we discussed in
recent postings that are available online at 

https://sourceforge.net/mailarchive/forum.php?thread_id=3283717&forum_id=419


Of course, any feedback and contributions are welcome.

- Jon

[Ipaudit-devel] New ipaudit-web BETA8 Imminent

[Jon R. <jon...@uc...>]

Greetings.

I've slowly put together a candidate for ipaudit-web BETA8.  I'm
thinking of releasing this in a week or so unless I get some problem
feedback.  If anyone's interested in taking a look you can download it
from

http://ipaudit.sourceforge.net/ipaudit-web/download/ipaudit-web-1.0BETA8.tgz

The main improvments are (1) the cgi-bin SearchIpauditData works
with Taint checking (2) the errno.h include has been corrected and 
(3) some erroros in ICMP documentation (in both the ipaudit man page and
the cgi-bin port script) have been corrected.

Of course, if anyone finds any problems let me know.

Next, a missive on some short term goals ...

- Jon

Re: [Ipaudit-devel] Compiled responses

[Chris G. <cm...@ua...>]

"Jason R. Martin" <jrm...@cr...> writes:

> On a related note, has anyone tossed around the idea of Windows as well?
> Perhaps Chris could answer this:  how terribly horrible and difficult
> is/was it to have snort run in Windows as well as *nix?  

Daemon code initialization isn't too hard. We are fortunate to have a
win32 guy.  The webfront end would have it's own set of issues like
abstracting out path notations and making sure that we stick to a good
set of includes.

Do a perplatform system include file and have one big ifdef based on
platforms.  We've got a distributed #ifdef WIN32,, 

> Just curious, since if it wasn't terribly difficult using Winpcap
> then it might be an interesting side venture.

The biggest part is that if someone has a bug only on windows, I can't
care because I don't have the resources to reproduce it.

WinPcap works well on ethernet.
-- 
Chris Green <cm...@so...>
You now have 14 minutes to reach minimum safe distance.