[ZendTo] Re: ZendTo: Release 4.11-13

[Jules]

It gets it from the ZendTo database. Everything you need is all in 
there. But the database only holds data for currently-valid drop-offs, 
there isn't any historical data in there. Which is why I use rrdtool, as 
that handles all the historical data necessary to produce the graphs. 
And all without anything that's going to steadily grow with time. 
rrdtool has a fixed size data file that is carefully managed so that it 
never grows. The zendto.log file is the only one in ZendTo that will 
just steadily grow with time, and it does that very slowly.

Mostly you just need lots of disk space. We run a 32-day retention time 
here (means you can guarantee a month), and have 1 TByte of disk space 
for the /var/zendto store. We hope that's going to be enough for a 
while. It's a big VM and so easy to extend as and when we need to.

Jules.

On 17/12/2013 12:21, Harris, David wrote:
> Thanks for this.
>
> I've got one more little question :-)
>
> I'm doing some detailed log analysis,  - justifying a bigger server :-)  Where does SendTo get it's information from to produce the statistics about the size of uploads? I've looked through the Zendto.log, and nothing in there indicates the size of drop offs - is it getting this info from somewhere else? The webserver log?
>
> Thanks
> Dave
>
> -----Original Message-----
> From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of Jules
> Sent: 17 December 2013 10:46
> To: ZendTo Users
> Subject: [ZendTo] Re: ZendTo: Release 4.11-13
>
>
> On 17/12/2013 09:26, Harris, David wrote:
>> Hi,
>>
>> Is this the vulnerability I picked up with our Nessus scanner?
> Don't know. It's CVE-2013-6808.
>> Also, I'm a bit of a linux idiot - what's the best way to perform the updates??
> If you're running RedHat/CentOS or any other yum based system then just
>       yum update zendto
> should work.
> If you're running Ubuntu/Debian or any other apt based system then
>       apt-get update
>       apt-get upgrade zendto
> should work.
>
> Jules.
>
>> Dave
>>
>>
>> -----Original Message-----
>> From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of Jules
>> Sent: 14 December 2013 13:47
>> To: ZendTo Users
>> Subject: [ZendTo] ZendTo: Release 4.11-13
>>
>> Folks,
>>
>> I have just released a new version to fix the vulnerability found by Richard Rogerson in ZendTo. It's a cross-site scripting vulnerability that I let through by mistake.
>> I have done a similar test to the one Richard used to demonstrate it, and the fault is now caught correctly.
>>
>> Please upgrade and let me know that it works for you!
>>
>> Jules
>>
>> --
>> Julian Field MEng MBCS CITP CEng
>>
>> South-east Iceland: Cyclonic, 5 to 7, increasing gale 8 to storm 10 in east.
>> Very rough or high. Rain or squally showers. Good, occasionally poor.
>>
>> www.Zend.To
>> Twitter: @JulesFM
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>> _______________________________________________
>> ZendTo mailing list
>> ZendTo at zend.to
>> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>>
>> _______________________________________________
>> ZendTo mailing list
>> ZendTo at zend.to
>> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>>
>> Jules
>>
>> -- 
>> Julian Field MEng MBCS CITP CEng
>>
>> 'Adversity is like a strong wind. I don't mean just that it holds
>>    us back from places we might otherwise go. It also tears away from
>>    us all but the things that cannot be torn, so that afterward we see
>>    ourselves as we really are, and not merely as we might like to be.'
>>    - Arthur Golden
>>
>> www.Zend.To
>> Twitter: @JulesFM
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
> Jules
>
> -- 
> Julian Field MEng MBCS CITP CEng
>
> 'I have lost friends, some by death ... others through sheer inability
>   to cross the street.' - Viginia Woolf
>
> www.Zend.To
> Twitter: @JulesFM
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654