Top > Security > System security > WormReport

WormReport - Filters out worm hits

Worm Report is a script that filters out known worm hits from the access log, and puts them into their own files named for the IP/Host that has been "wormed". A report containing the count, hostname, ip, and a guess at the parent domain is printed to STDOUT to facilitate contacting these individuals.

This script is useful in the short term to get the info to the people who need it. Adding a new worm requires adding a new worm hit string to the DATA section of the script, nothing so fancy (or exhaustive) as an Apache module.

Obtaining

Web pagehttp://sourceforge.net/projects/wormreport/
Source tarball http://prdownloads.sourceforge.net/wormreport/wormreport-1.2.tar.gz
Source informationhttp://sourceforge.net/project/showfiles.php?group_id=36097
Version 1.2 (stable) released on 2001-09-21
Licensed under PublicDomain.
This is not a GNU package.

Support contacts


Project contacts

Maintainers
Developers

Related information

Source repository :pserver:anonymous@cvs.wormreport.sourceforge.net:/cvsroot/wormreport http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/wormreport/
Interfacescommand line
Source languagesPerl
Build prerequisitesGTK+ 1.2.0

Entry information

License verified byJanet Casey <jcasey@gnu.org> on 2001-09-21
Entry compiled byJanet Casey <jcasey@gnu.org>

Categories



The copyright licensing notice below applies to this text. The software described in this text has its own copyright notice and license, which can usually be found in the distribution itself.

Copyright © 2000, 2001, 2002, 2003 Free Software Foundation, Inc.

Permission is granted to copy, distribute, and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A copy of this license is included in the file COPYING.DOC.

Please report any problems in this page to bug-directory@gnu.org, or find out how you can help fix them.

The FSF provides this directory as a service to the free software community. Please consider donating to the FSF to help support this project.