[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

bogus 'active system attack' logcheck (merely postgres "explain"!)



well my adrenals got their exercise today. i'm wondering what's
the best approach -- munge logcheck? munge postgres?

here's logcheck sent me:

Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Jan 15 08:32:17 server postgres[6712]: [2-2] Nested Loop (cost=1.77..13992.25 rows=1 width=101)
Jan 15 08:32:17 server postgres[6712]: [2-3]   ->  Nested Loop (cost=1.77..13990.98 rows=1 width=97)
Jan 15 08:32:17 server postgres[6712]: [2-5]               -> Nested Loop  (cost=0.00..13986.19 rows=1 width=68)
Jan 15 08:32:17 server postgres[6712]: [2-2] Nested Loop (cost=1.77..13992.25 rows=1 width=101)
Jan 15 08:32:17 server postgres[6712]: [2-3]   ->  Nested Loop (cost=1.77..13990.98 rows=1 width=97)
Jan 15 08:32:17 server postgres[6712]: [2-5]               -> Nested Loop  (cost=0.00..13986.19 rows=1 width=68)
Jan 15 08:32:24 server postgres[6712]: [3-2] Nested Loop (cost=0.00..13992.85 rows=1 width=101)
Jan 15 08:32:24 server postgres[6712]: [3-3]   ->  Nested Loop (cost=0.00..13991.58 rows=1 width=97)
Jan 15 08:32:24 server postgres[6712]: [3-4]         ->  Nested Loop  (cost=0.00..13988.56 rows=1 width=93)
Jan 15 08:32:24 server postgres[6712]: [3-5]               -> Nested Loop  (cost=0.00..13986.19 rows=1 width=68)
<snip>

which are only the results of running an "explain" query in
postgres:

	hits=# explain
	hits-# select * from hits where at>'2003-1-14';
	NOTICE:  QUERY PLAN:

Merge Join  (cost=1314.44..1555.23 rows=348 width=304)
 -> Index Scan using browser_pkey on browser b  (cost=0.00..215.83 rows=7894 width=64)
 -> Sort  (cost=1314.44..1314.44 rows=348 width=240)
     -> Hash Join  (cost=2.91..1299.74 rows=348 width=240)
         -> Hash Join  (cost=1.15..1291.01 rows=348 width=215)
             -> Nested Loop  (cost=0.00..1283.77 rows=348 width=201)
                 -> Index Scan using h_ix on _hits h  (cost=0.00..230.11 rows=348 width=100)
                 -> Index Scan using referer_pkey on referer r  (cost=0.00..3.01 rows=1 width=101)
             -> Hash  (cost=1.12..1.12 rows=12 width=14)
                 -> Seq Scan on method m  (cost=0.00..1.12 rows=12 width=14)
         -> Hash  (cost=1.61..1.61 rows=61 width=25)
             -> Seq Scan on server s  (cost=0.00..1.61 rows=61 width=25)

EXPLAIN
hits=# 

what would be the least insane way to address this and give my
adrenaline a sense of relaxation?

-- 
I use Debian/GNU Linux version 3.0;
Linux server 2.2.17 #1 Sun Jun 25 09:24:41 EST 2000 i586 unknown
 
DEBIAN NEWBIE TIP #47 from Will Trillich <will@serensoft.com>
:
Want to LEARN MORE ABOUT VIM? From inside vim (when you're
editing some text) try
	:help
	:help howto
	:help options
Type "ctrl-W ctrl-W" to switch 'panes', or "ctrl-W q" to close
one. (Try ":help CTRL-W" for more details on control-W.)

Also see http://newbieDoc.sourceForge.net/ ...



Reply to: