X-ARF Reporting
|
Download
X-ARF Reporting files |
Feature Requests |
Project
detail and discuss |
Get
support |
Donate
money |
This is the X-ARF Reporting project
("x-arfreporting").
This project was registered on SourceForge.net on Mar 20, 2010, and is
described by the project team as follows:
This project
automates the reporting of improper Internet use on the X-ARF format.
The two schemas specified abuse_login-attack and abuse_malware are
currently implemented. |
News:
- Fixed Bug in the xarf, there was a problem regarding the date / timestamps
- Fixed Bug in authlogSSHParser.py that was crashing the application if there where no failed login
- Realising reportitDaemon.py that support the deamon mode
with the -d switch. You need to have the python-daemon package
installed to use it.
Use me:
- Download and install the DNS Python modul. This will
be used be X-ARF reporting to determine the abuse contact of the ISP
- Donwload the full X-ARF Reporting package
- Extract the content into one directory
- if you have the python daemon package installed you can use
the reportitDaemon.py application, otherwise you have to use the
reportit.py inside screen or nohup
- To report:
- ssh attackes supply -a "/path/to/authlog" then
X-ARF Reporting will report ssh attacks
- nepenthes malware infections supply -n
"/path/to/logged_submissions" then X-ARF Reporting will
report the malware attacks
- Start the X-ARF Reporting by python reportit.py or reportitDaemon.py -s
Your@E-Mail.Address -m "you.mail.server" [-a authlog] -[n
logged_submissions] [-v] [-d]
|
©Copyright 1999-2009 -
Geeknet, Inc., All Rights Reserved
About -
Legal -
Help
|