[Xitami] LOG Filter to remove those log-entries created byhttp-viruses.
buteskin
xitami@lists.xitami.org
Tue, 19 Feb 2002 16:38:02 +0100
This is a multi-part message in MIME format.
------=_NextPart_000_0019_01C1B963.CCA41210
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
infected nimda/codered pc's try to attack you, luckyly you have xitami ! =
it does not affect you,=20
----- Original Message -----=20
From: Chris Stromberger=20
To: xitami@lists.xitami.org=20
Sent: Tuesday, February 19, 2002 3:47 PM
Subject: Re: [Xitami] LOG Filter to remove those log-entries created =
byhttp-viruses.
As a newbie, I've noticed these lines in the log files. Is this =
anything to worry about?
Eg:
GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNN.....
GET =
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?.....
GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/.....
GET /c/winnt/system32/cmd.exe?/c
etc.
Thanks,
Chris
>>> hace_x@yahoo.com 02/19/02 04:14AM >>>
Hello all,
To get rid of all the log-entries created by
http-viruses, I have created a little windows-program
that processes logfiles and removes those 'dirty'
log-entries that clogup the xitami-logfile.
You can view all removed lines and kept lines in the
program because all lines are copied in the listboxes.
You can download the program 'logfilter' at:
http://hace.dyndns.org/files/files.html
Please first read the logfilter.TXT file for further
comments.
If you have questions or suggestions for the program
please sent those to my email address.
Hope this helps people who where searching for this
kind of software and couldn't find it (like myself
;-),
Thanks,
Hace
__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
------=_NextPart_000_0019_01C1B963.CCA41210
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY style=3D"MARGIN-TOP: 2px; FONT: 8pt MS Sans Serif; MARGIN-LEFT: =
2px"=20
bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>infected nimda/codered pc's try to =
attack you,=20
luckyly you have xitami ! it does not affect you, </FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3DChris.Stromberger@wnco.com=20
href=3D"mailto:Chris.Stromberger@wnco.com">Chris Stromberger</A> =
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dxitami@lists.xitami.org=20
href=3D"mailto:xitami@lists.xitami.org">xitami@lists.xitami.org</A> =
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Tuesday, February 19, =
2002 3:47=20
PM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [Xitami] LOG =
Filter to=20
remove those log-entries created byhttp-viruses.</DIV>
<DIV><BR></DIV>
<DIV><FONT size=3D1>As a newbie, I've noticed these lines in the log=20
files. Is this anything to worry about?</FONT></DIV>
<DIV><FONT size=3D1></FONT> </DIV>
<DIV><FONT size=3D1>Eg:</FONT></DIV>
<DIV><FONT size=3D1></FONT> </DIV>
<DIV>GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNN.....</DIV>
<DIV>GET=20
=
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?.....</DIV=
>
<DIV>GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/.....</DIV>
<DIV>GET /c/winnt/system32/cmd.exe?/c</DIV>
<DIV> </DIV>
<DIV>etc.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks,<BR>Chris<BR><BR>>>> <A=20
href=3D"mailto:hace_x@yahoo.com">hace_x@yahoo.com</A> 02/19/02 04:14AM =
>>><BR>Hello all,<BR><BR>To get rid of all the log-entries =
created=20
by<BR>http-viruses, I have created a little windows-program<BR>that =
processes=20
logfiles and removes those 'dirty'<BR>log-entries that clogup the=20
xitami-logfile.<BR><BR>You can view all removed lines and kept lines =
in=20
the<BR>program because all lines are copied in the =
listboxes.<BR><BR>You can=20
download the program 'logfilter' at:<BR><A=20
=
href=3D"http://hace.dyndns.org/files/files.html">http://hace.dyndns.org/f=
iles/files.html</A><BR><BR>Please=20
first read the logfilter.TXT file for further<BR>comments.<BR><BR>If =
you have=20
questions or suggestions for the program<BR>please sent those to my =
email=20
address.<BR><BR>Hope this helps people who where searching for =
this<BR>kind of=20
software and couldn't find it (like=20
=
myself<BR>;-),<BR><BR>Thanks,<BR>Hace<BR><BR><BR>________________________=
__________________________<BR>Do=20
You Yahoo!?<BR>Yahoo! Sports - Coverage of the 2002 Olympic =
Games<BR><A=20
=
href=3D"http://sports.yahoo.com">http://sports.yahoo.com</A><BR><BR>--<BR=
>Xitami=20
Users Mailing List -- For Xitami support<BR>To unsubscribe: <A=20
=
href=3D"http://lists.xitami.org/mailman/listinfo/xitami">http://lists.xit=
ami.org/mailman/listinfo/xitami</A><BR></DIV></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_0019_01C1B963.CCA41210--