I looked in cgi-bin/* but did not find a viewhits, under dachstein the file (equivalent I assume) is viewlogs. Again I'm not familiar w/ the html and all of this, but I'd like to do this to atleast let the offending machines be aware of my dissatisfaction...
Joey -----Original Message----- From: Cass Tolken [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 20, 2002 11:41 AM To: [EMAIL PROTECTED]; LEAF Subject: RE: [leaf-user] Identifying the "scanning" culprit??? Hi Joey, I mentioned below in my example that the modification is in /var/sh-www/cgi-bin/viewhits specifically under the "hitssort" clause of the "case" construct. I also mentioned I do this in the "messages" and "x" too... but I figured it was easier to just post the whole scipts (I sent the URL in a previous e-mail) Arin is for American IPs, you can further modify my script modifications to include European, Asian, etc. IPs as an exercise ;) http://www.ripe.net/perl/whois/ http://www.apnic.net/apnic-bin/whois2.pl etc. --- Joey Officer <[EMAIL PROTECTED]> wrote: > Judging from what it sounds I could click on the link and automagically do a > search on that hit. I like it. But I'm very familiar with writing any kind > of html lines. Are the lines you posted below ready for input into a > Dachstein weblet config. And specifically which files would I modify... > > Sorry for being ignorant on the matter... > > Joey > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Cass Tolken > Sent: Tuesday, August 20, 2002 9:40 AM > To: Craig; LEAF > Subject: Re: [leaf-user] Identifying the "scanning" culprit??? > > Hello again Craig, > > If you're using weblet (Bering comes with it default) you can so something > like this: > > in /var/sh-www/cgi-bin/viewhits, hitssort) > > sed 's/\(.\{6\}\)\(.*SRC=\)\(.*\)\( DST=.*\)/\<\/td\>\<td\>\<a > href=\"http:\/\/ws.arin.net\/cgi-bin\/whois.pl?queryinput=\3\"\>A > rin\<\/a\> - \<a > href=\"viewhits?x_\3\"\>\3\<\/a\><\/td\>\<td\>\1\<\/td\>\<\/tr\>/'|\ > > so that I can just click to query arin. I also do this in "messages" and > "x" > in the viewhits script. You should be able to figure out how from this > example (hopefully ;). [snip] __________________________________________________ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
