On Wed, 19 Sep 2001 22:22, Roger Wrethman wrote:
> I refined the script that was posted earlier. It now reports CODE RED,
> NIMDA and all the other hits on the server on the external interface.
I think there's a little bug hidden in there, actually... when counting
servers, you're cutting the wrong fields out of the log reports, and so it's
reporting the number of attacks on *local* server names... if you replace all
instances of cut -f 1 with cut -f 2, then all works fine...
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
