Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
arya-arya-mongrel_proctitle
Advanced tools
This is a simple plugin for Mongrel which changes the process title to reflect what it's currently doing. You can then determine a given Mongrel server's status using "ps".
For example:
mongrel_rails [10010/2/358]: handling 127.0.0.1: HEAD /feed/cal/global/91/6de4, GET /feed/index
| | | | | |
| | | | | The current req (method / path)
| | | | |
| | | | The client IP
| | | |
| | | What it's doing
| | |
| | Requests processed during server lifetime
| |
| Requests currently queued/being processed concurrently
|
The port that Mongrel is serving
This is almost entirely based on Alexander Staubo's Rails plugin with the same name:
http://purefiction.net/mongrel_proctitle/
The main difference is that the GemPlugin will automatically be loaded by all mongrels without additional code changes or configuration.
This is a fork of rtomayko's fork of mongrel_proctitle that displays the current request instead of the most recent received request, as well a list of the request queue.
Once the program is installed, you should be able to see the formatted process title by running:
$ ps -axwwo pid,command | grep mongrel_rails
See ps(1) for more options. You may want to include %cpu, rsz, %mem, or other fields in output.
There's also a mongrel_top
executable included in the gem that works like
top(1) but displays only mongrel processes:
$ mongrel_top
By default, mongrel_top
updates the display every 0.25 seconds and shows the
pid and process title. You can select a different interval and fields with the
-s and -o arguments, respectively:
$ mongrel_top -s 0.1 -o pid,%cpu,rsz,command
The "command" field must be included.
This version of the plugin is packaged specifically as a Mongrel GemPlugin. Install using:
gem install mongrel_proctitle --source=http://tomayko.com
Once installed, all new mongrels will automatically load the plugin during startup. If you would prefer to control which mongrels load the plugin, do not install this gem. Use the directions below instead.
See Alexander Staubo's original project:
http://purefiction.net/mongrel_proctitle/
In your application's start-up process, re-open Mongrel::Proctitler and define a get_app_revision method. In a Rails app, a good place to do this is in RAILS_ROOT/config/environments/production.rb. An example get_app_revision method might look like:
def get_app_revision
cat ./REVISION
.chomp
end
I've included the LICENSE file from the original mongrel_proctitle distribution. It is the "New and Simplified BSD License". More information on this license can be found at:
FAQs
Unknown package
We found that arya-arya-mongrel_proctitle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.