[Dshield] Parser request for firestarter linux

[jullrich at euclidian.com (Johannes B. Ullrich)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Firestarter uses the standard IP tables (2.4 kernel, e.g. RedHat 7.1) or
IP chains (2.2 kernel) mechanism. You can use the clients for these
systems to extract messages from /var/log/messages.

  Johannes.



On Fri, 14 Sep 2001, Galen flightsimHQ founder wrote:

> Would someone kindly build a parser for linux
> firestarter logs
> note: firestarter does not indicate protocol
>
> ex:
>
> 35830		ts26-110.ctaz.com		unknown		Sep  6 22:51:06
> 43612		216.67.202.197		unknown		Sep  6 22:51:03
> 43422		216.67.202.197		unknown		Sep  6 22:51:01
> 1349		216.67.202.197		sbook		Sep  6 22:50:58
> 1785		216.67.202.197		windlm		Sep  6 22:50:58
> 1397		216.67.202.197		audio-activmail		Sep  6 22:50:58
>
> =====
> Support High Quality Open Source Flight Simulation Patches http://fly.to/flightsimHQ | http://fly.to/jcn
>
> __________________________________________________
> Terrorist Attacks on U.S. - How can you help?
> Donate cash, emergency relief information
> http://dailynews.yahoo.com/fc/US/Emergency_Information/
>
> _______________________________________________
> Dshield mailing list
> [EMAIL PROTECTED]
> To change your subscription options (or unsubscribe), see: http://www1.dshield.org/mailman/listinfo/dshield
>

- -- 
- -------
[EMAIL PROTECTED]                    Join http://www.DShield.org
                                     Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7ohPVVOIizK5pIDMRAjVDAKCVL97jNGJaVA8Di5u4dd095tyHYgCgmmRr
xUrIVumAYB3qcvp0aG+JKTM=
=ryGh
-----END PGP SIGNATURE-----