Firewall Wizards mailing list archives
Re: Log file monitoring - retail?
From: Rick Murphy <rmurphy () mitretek org>
Date: Wed, 17 Mar 1999 08:17:03 -0500
At 03:08 PM 3/16/99 -0500, carson () tla org wrote:
Once upon a time, I heard of a utility called retail. It was basically 'tail -f' that noticed if a new file had replaced the old and re-opened it (log file rotation, for example).
This was written by mjr for Gauntlet. What 'retail' does is to cat the contents of a file to stdout, then remember the eof point and inode number (in a parallel file). When you next retail the file, the output starts from the former eof. If the file is deleted and replaced, the inode number doesn't match and retail starts over. Sounds like a 10 minute hack to the /bin/cat source to make a replacement. (Unless you've got Gauntlet source :-) -Rick
Current thread:
- Log file monitoring - retail? carson (Mar 16)
- Re: Log file monitoring - retail? Craig H. Rowland (Mar 17)
- Re: Log file monitoring - retail? Marcus J. Ranum (Mar 17)
- RE: Log file monitoring - retail? ygk (Mar 17)
- Re: Log file monitoring - retail? Daniel J. Gregor Jr. (Mar 17)
- Re: Log file monitoring - retail? Rick Murphy (Mar 17)
- Re: Log file monitoring - retail? ark (Mar 17)
- Re: Log file monitoring - retail? reynhout (Mar 17)
- RE: Log file monitoring - retail? Joseph Judge (Mar 19)
- <Possible follow-ups>
- RE: Log file monitoring - retail? Shivdasani, Meenoo (Mar 17)
- Re: Log file monitoring - retail? Antonomasia (Mar 17)