[logs] Brightmail

Mordechai T. Abzug morty at frakir.org
Mon Jul 16 21:40:32 PDT 2007


On Mon, Jul 16, 2007 at 08:23:57PM +0530, harshad.mengle at wipro.com wrote:

> Currently we are doing analysis on Brightmail. There are some issues
> getting Event ID list. Is there anybody who can provide any
> information on Brightmail Event ID for Ver 6.0.1.

[This is only tangentially related to the above.  Sorry.]

Wouldn't it be nice if programs that did calls to log frameworks had
an automatic mechanism to obtain a list of log/audit messages at build
time?  That way, ISVs could more easily document log messages.  Log
messages could even get their own data section name in the binary, so
users could extract a list of known log messages and verify for
themselves that all possible messages are documented.  This would be
really easy in languages with a preprocessor (i.e. C).  Somewhat
harder in regular compiled languages, and probably impossible in pure
interpreted languages that don't require building.

This would also fall over if the ISV implemented their own logging
wrapping function, such that all logging calls were made from the same
point in the code with generic arguments at build time.

So yeah, it's not going to happen.  But wouldn't it be nice?

- Morty


More information about the LogAnalysis mailing list