[Dshield] blacklist parsing help

Micheal Patterson micheal at cancercare.net
Fri May 24 13:43:27 GMT 2002


Like I said, it's not pretty. It just works for me :)


--

Micheal Patterson
Network Administration
Cancer Care Network
405-733-2230

----- Original Message -----
From: "Erik Fichtner" <emf at servervault.com>
To: <list at dshield.org>
Sent: Thursday, May 23, 2002 8:12 PM
Subject: Re: [Dshield] blacklist parsing help


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Thu, May 23, 2002 at 05:09:12PM -0500, Micheal Patterson wrote:
> > cat block.txt |grep -v "#" |grep -v Start |grep -v RESERVED|cut -f -2 >
> > block1.txt
>
> Yuck.
>
> 1) fetch netmask-2.3.3 from
http://packages.debian.org/stable/net/netmask.html
> You'll find it useful.  It builds on *IX.  It's good.  You'll use it for
> hundreds of things.
>
> 2) netmask `awk '/^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/ {print $1":"$2;}'
block.txt`
>
> Fresh and ready for import into your filter language of choice.  Change
> arguments to netmask if you need a different flavor, like Cisco or
something.
>
>
>
> - --
> Erik Fichtner
> Security Administrator, ServerVault Corp.
> 703-652-5900
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (FreeBSD)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE87ZOKQ7EzrewLMS0RAsXgAJ9pE7JQsDsWTWnBs+QHdNRd1ENo2ACfXA33
> mAa7fIJGHWK04uRm1kKGHPU=
> =1mkO
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list