[Xitami] LOG Filter to remove those log-entries created by
http-viruses.
Chris Stromberger
xitami@lists.xitami.org
Tue, 19 Feb 2002 08:47:02 -0600
This is a MIME message. If you are reading this text, you may want to
consider changing to a mail reader or gateway that understands how to
properly handle MIME multipart messages.
--=_217C6262.137248F5
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
As a newbie, I've noticed these lines in the log files. Is this anything =
to worry about?
Eg:
GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNN.....
GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?.....
GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/.....
GET /c/winnt/system32/cmd.exe?/c
etc.
Thanks,
Chris
>>> hace_x@yahoo.com 02/19/02 04:14AM >>>
Hello all,
To get rid of all the log-entries created by
http-viruses, I have created a little windows-program
that processes logfiles and removes those 'dirty'
log-entries that clogup the xitami-logfile.
You can view all removed lines and kept lines in the
program because all lines are copied in the listboxes.
You can download the program 'logfilter' at:
http://hace.dyndns.org/files/files.html
Please first read the logfilter.TXT file for further
comments.
If you have questions or suggestions for the program
please sent those to my email address.
Hope this helps people who where searching for this
kind of software and couldn't find it (like myself
;-),
Thanks,
Hace
__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
--=_217C6262.137248F5
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Description: HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1"=
>
<META content=3D"MSHTML 5.50.4134.600" name=3DGENERATOR></HEAD>
<BODY style=3D"MARGIN-TOP: 2px; FONT: 8pt MS Sans Serif; MARGIN-LEFT: =
2px">
<DIV><FONT size=3D1>As a newbie, I've noticed these lines in the log =
files. =20
Is this anything to worry about?</FONT></DIV>
<DIV><FONT size=3D1></FONT> </DIV>
<DIV><FONT size=3D1>Eg:</FONT></DIV>
<DIV><FONT size=3D1></FONT> </DIV>
<DIV>GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNN.....</DIV>
<DIV>GET=20
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?.....</DIV>
<DIV>GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/.....</DIV>
<DIV>GET /c/winnt/system32/cmd.exe?/c</DIV>
<DIV> </DIV>
<DIV>etc.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks,<BR>Chris<BR><BR>>>> hace_x@yahoo.com 02/19/02 =
04:14AM=20
>>><BR>Hello all,<BR><BR>To get rid of all the log-entries =
created=20
by<BR>http-viruses, I have created a little windows-program<BR>that =
processes=20
logfiles and removes those 'dirty'<BR>log-entries that clogup the=20
xitami-logfile.<BR><BR>You can view all removed lines and kept lines in=20
the<BR>program because all lines are copied in the listboxes.<BR><BR>You =
can=20
download the program 'logfilter' at:<BR><A=20
href=3D"http://hace.dyndns.org/files/files.html">http://hace.dyndns.org/fil=
es/files.html</A><BR><BR>Please=20
first read the logfilter.TXT file for further<BR>comments.<BR><BR>If you =
have=20
questions or suggestions for the program<BR>please sent those to my =
email=20
address.<BR><BR>Hope this helps people who where searching for this<BR>kind=
of=20
software and couldn't find it (like=20
myself<BR>;-),<BR><BR>Thanks,<BR>Hace<BR><BR><BR>__________________________=
________________________<BR>Do=20
You Yahoo!?<BR>Yahoo! Sports - Coverage of the 2002 Olympic Games<BR><A=20
href=3D"http://sports.yahoo.com">http://sports.yahoo.com</A><BR><BR>--<BR>X=
itami=20
Users Mailing List -- For Xitami support<BR>To unsubscribe: <A=20
href=3D"http://lists.xitami.org/mailman/listinfo/xitami">http://lists.xitam=
i.org/mailman/listinfo/xitami</A><BR></DIV></BODY></HTML>
--=_217C6262.137248F5--