North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Disabling QAZ (was Re: Port 139 scans)

  • From: Bennett Todd
  • Date: Sat Sep 30 09:52:55 2000 
2000-09-29-18:51:16 Ben Browning:
> On a side note, if anyone knows a good logfile parsing perl script
> that pulls out all the IP addresses in a log, I'd love a copy.

How about

	perl -lne 'print $1 for /(\d+\.\d+\.\d+\.\d+)/g'

Take the output of that and feed it through dnsfilter (from djbdns,
<URL:http://djbdns.org/>) and you can get the reverse lookups easy.
Fast, too, especially if you're running dnscache for your recursive
resolver.

-Bennett

Attachment: pgp00017.pgp
Description: PGP signature