Hmm, that looks good, but do you think they will accept this?
grep default.ida /var/log/httpd/access_log | mail -s redworm
[EMAIL PROTECTED]
This would put the log into the body of the email instead of the attachment.
I am looking for a single, command line solution to pass around and say
"Here, type this" while still providing dshield with a format they can make
use of.
<rant>
To the list in general, while this may seem somewhat off-topic, I feel it is
the responsibility of those who run servers (which most on this list do) to
support and protect others who do the same. While we are sitting back and
enjoying the fact (and perhaps gloating a bit!) that we are safe, lets help
out and inform those who are not.
Besides, its our bandwidth they are going to eat when this thing fires off!
</rant>
Eric
-----Original Message-----
From: JB [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 12:03 PM
To: [EMAIL PROTECTED]
Subject: RE: [e-smith-devinfo] Stoping the worm
grep default.ida /var/log/httpd/access_log >> ~/redworm.log
This will parse the attacks into a file called redworm.log in your home
directory. Then just mail redworm.log to [EMAIL PROTECTED]
> I would love to. Give me the exact code to send it in a format they would
> like and I will spread the word to as many server admins as I can.
>
> Eric
>
> -----Original Message-----
> From: JB [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 11:30 AM
> To: [EMAIL PROTECTED]
> Subject: [e-smith-devinfo] Stoping the worm
>
>
> There is a project going to catolog the IP's of infected servers and
> notify a responsible admin.
>
> You can grep and mail your logs to [EMAIL PROTECTED]
>
>
>
>
>
>
>
> --
> Please report bugs to [EMAIL PROTECTED]
> Please mail [EMAIL PROTECTED] (only) to discuss security issues
> Support for registered customers and partners to [EMAIL PROTECTED]
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Archives by mail and
http://www.mail-archive.com/devinfo%40lists.e-smith.org
>
> --
> Please report bugs to [EMAIL PROTECTED]
> Please mail [EMAIL PROTECTED] (only) to discuss security issues
> Support for registered customers and partners to [EMAIL PROTECTED]
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Archives by mail and
http://www.mail-archive.com/devinfo%40lists.e-smith.org
>
>
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
