[8754] in Info-AFS_Redistribution
Re: application and user logging
daemon@ATHENA.MIT.EDU (Peter Scott)
Wed Jun 20 16:44:44 2001
Message-Id: <4.3.2.7.2.20010620133631.00b39590@mail2a.jpl.nasa.gov>
Date: Wed, 20 Jun 2001 13:38:31 -0700
To: Russ Allbery <rra@stanford.edu>,
Petros Triantafyllidis <trian@itc.auth.gr>
From: Peter Scott <Peter.J.Scott@jpl.nasa.gov>
Cc: info-afs@transarc.com
In-Reply-To: <ylbsninbec.fsf@windlord.stanford.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
At 01:28 PM 6/20/01 -0700, Russ Allbery wrote:
> > More specifically, we intend in our University campus to check whether
> > some programs are used or not, in order to re-organize our purchasing
> > policy. Therefore, we are looking for a cross-plattform solution (Unices,
> > Windows) to monitor the use of AFS, both in terms of users ticketing and
> > applications use as well, while a further plan is to show the results on
> > the web in real time.
>
>I have a Unix-only solution that involves wrappering all the binaries
>whose usage you want to track so that rather than running the actual
>binary, the user first runs a small C program that sends a UDP packet to a
>tracking host and then execs the real binary. It's not robust in the face
>of users trying to intentionally bypass it, but it works pretty well
>otherwise.
We are considering monitoring based upon the count of number of volume
accesses within the last day. Not totally accurate perhaps, but seems as
though the noise should not swamp the signal. And since we're using depot,
every tool for every platform has it own volume.
Has anyone successfully used this approach? Or proved it fruitless?
>I have no idea if the same thing would work for Windows, since I know very
>little about Windows and am interested in knowing less,
I know *exactly* what you mean...
--
Peter Scott
Peter.J.Scott@jpl.nasa.gov