Re: [analog-help] overriding host exclusions

2001-07-17 Thread Stephen Turner

On Mon, 16 Jul 2001, Phil Glatz wrote:

 At 04:17 PM 07/16/2001 -0500, Duke wrote:
 Remember, that the analog.cfg is
 parsed before other configuration files.  By excluding
 a host in analog.cfg, it cannot be included in another
 configuration file.
 
 What I tried was doing an excluding in analog.cfg, then negating that with 
 an INCLUDE * in a subsequently read config file.
 
 according to the manual:
 
All the INCLUDE and EXCLUDE commands for that item are considered one by 
 one in
order, and the item is included or excluded according to the last 
 command it matched.
 
 I took that to mean that an action in an earlier config file could be 
 reversed.  Perhaps I am wrong in this assumption

You're right, Phil; Duke is wrong. Another way to think of this is that
ALIASes match the earliest command that applies to them, but IN/EXCLUDEs
match the last.

 Including (+) and excluding (-) the following hosts:
All included, then
- 216.36.66.185
- 216.15.98.38
+ *
 
 This sounds like all hosts should be included, hence my confusion.
 

They are all included. Why do you think they're not being included?

-- 
Stephen Turner   http://www.statslab.cam.ac.uk/~sret1/
  Statistical Laboratory, Wilberforce Road, Cambridge, CB3 0WB, England
This is Henman's 8th Wimbledon, and he's only lost 7 matches. BBC, 2/Jul/01


+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



[analog-help] overriding host exclusions

2001-07-16 Thread Phil Glatz

In my general analog.cfg file, I have
HOSTEXCLUDE 216.15.98.38

This is so I can exclude traffic from a particular host I do development on.

However, I'd like to do a raw traffic report that includes everything, so I 
read in a second config file to turn this exclusion off.  But I can't get 
it to take.  I've tried:

HOSTINCLUDE *

I've even put it in analog.cfg immediately following the HOSTEXCLUDE 
command, but these hosts are still being excluded - what am I doing wrong?

thanks

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] overriding host exclusions

2001-07-16 Thread Duke Hillard

Read the documentation for inclusions and exclusions
(http://analog.sourceforge.net/docs/include.html is one
of the mirror sites).  Remember, that the analog.cfg is
parsed before other configuration files.  By excluding
a host in analog.cfg, it cannot be included in another
configuration file.  What to do?  One suggestion is to
delete all HOST??CLUDE statements in analog.cfg
and insert a HOSTEXCLUDE statement in another
configuration file.  Run analog with the analog.cfg file
when all hosts are desired and run the alternate file
when exclusions are desired.  Another suggestion
is to comment the HOSTEXCLUDE statement in
the analog.cfg file when all hosts are desired (this
has the benefit of only one configuration file, but it
has the disadvantage of checking whether the line
is commented before beginning).

-- Duke Hillard


Phil Glatz wrote:

 In my general analog.cfg file, I have
 HOSTEXCLUDE 216.15.98.38

 This is so I can exclude traffic from a particular host I do development on.

 However, I'd like to do a raw traffic report that includes everything, so I
 read in a second config file to turn this exclusion off.  But I can't get
 it to take.  I've tried:

 HOSTINCLUDE *

 I've even put it in analog.cfg immediately following the HOSTEXCLUDE
 command, but these hosts are still being excluded - what am I doing wrong?

 thanks

 +
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +


begin:vcard 
n:Hillard;Duke
tel;work:337-482-5763
x-mozilla-html:TRUE
url:http://www.louisiana.edu/
org:University of Louisiana at Lafayette;University Computing Support Services
adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA
version:2.1
email;internet:[EMAIL PROTECTED]
title:University Webmaster  Computing Resources Coordinator
fn:Duke Hillard
end:vcard



Re: [analog-help] overriding host exclusions

2001-07-16 Thread Phil Glatz

At 04:17 PM 07/16/2001 -0500, Duke wrote:
Remember, that the analog.cfg is
parsed before other configuration files.  By excluding
a host in analog.cfg, it cannot be included in another
configuration file.

What I tried was doing an excluding in analog.cfg, then negating that with 
an INCLUDE * in a subsequently read config file.

according to the manual:

   All the INCLUDE and EXCLUDE commands for that item are considered one by 
one in
   order, and the item is included or excluded according to the last 
command it matched.

I took that to mean that an action in an earlier config file could be 
reversed.  Perhaps I am wrong in this assumption; using the -settings 
option, I see:

Including (+) and excluding (-) the following hosts:
   All included, then
   - 216.36.66.185
   - 216.15.98.38
   + *

This sounds like all hosts should be included, hence my confusion.

+
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|http://www.mail-archive.com/analog-help@lists.isite.net/
|http://lists.isite.net/listgate/analog-help/archives/
|http://www.tallylist.com/archives/index.cfm/mlist.7
+



Re: [analog-help] overriding host exclusions

2001-07-16 Thread Duke Hillard

The key is that it is an item by item process.
HOSTEXCLUDE 216.15.98.38 is one item.
HOSTINCLUDE * is another item.  Placing
HOSTINCLUDE 216.15.98.38 in your extra
configuration file might do the trick as that would
be a second reference to the same item.  I pointed
to that particular page in the documentation because
I like the example that is used.  My first time out with
includes and excludes would have been a mess if not
for that example.

-- Duke


Phil Glatz wrote:

 At 04:17 PM 07/16/2001 -0500, Duke wrote:
 Remember, that the analog.cfg is
 parsed before other configuration files.  By excluding
 a host in analog.cfg, it cannot be included in another
 configuration file.

 What I tried was doing an excluding in analog.cfg, then negating that with
 an INCLUDE * in a subsequently read config file.

 according to the manual:

All the INCLUDE and EXCLUDE commands for that item are considered one by
 one in
order, and the item is included or excluded according to the last
 command it matched.

 I took that to mean that an action in an earlier config file could be
 reversed.  Perhaps I am wrong in this assumption; using the -settings
 option, I see:

 Including (+) and excluding (-) the following hosts:
All included, then
- 216.36.66.185
- 216.15.98.38
+ *

 This sounds like all hosts should be included, hence my confusion.

 +
 |  This is the analog-help mailing list. To unsubscribe from this
 |  mailing list, go to
 |http://lists.isite.net/listgate/analog-help/unsubscribe.html
 |
 |  List archives are available at
 |http://www.mail-archive.com/analog-help@lists.isite.net/
 |http://lists.isite.net/listgate/analog-help/archives/
 |http://www.tallylist.com/archives/index.cfm/mlist.7
 +


begin:vcard 
n:Hillard;Duke
tel;work:337-482-5763
x-mozilla-html:TRUE
url:http://www.louisiana.edu/
org:University of Louisiana at Lafayette;University Computing Support Services
adr:;;P.O. Box 42770;Lafayette;LA;70504-2770;USA
version:2.1
email;internet:[EMAIL PROTECTED]
title:University Webmaster  Computing Resources Coordinator
fn:Duke Hillard
end:vcard