[Dshield] Problem submitting logs from custom dev

Olivier Baltus ob at scarlet.be
Wed Aug 16 09:24:15 GMT 2006


Dear,


I have quickly made a small app to send my router logs. But when I try the
log generated by the application in the dshield online parser, no entries
are recognized.

Can someone help me?

Here is a small extract:

2006-08-14 11:59:50 +02:00	58293354	1	193.74.71.23
55407	62.235.227.153	113	TCP
2006-08-14 11:56:12 +02:00	58293354	1	62.235.226.187
20496	62.235.227.153	445	TCP
2006-08-14 11:55:54 +02:00	58293354	1	62.235.20.47	2263
62.235.227.153	445	TCP
2006-08-14 11:54:41 +02:00	58293354	1	62.235.232.238	4932
62.235.227.153	445	TCP
2006-08-14 11:53:23 +02:00	58293354	1	62.235.233.38	4208
62.235.227.153	135	TCP
2006-08-14 11:52:24 +02:00	58293354	1	62.235.226.187
20496	62.235.227.153	445	TCP
2006-08-14 11:52:07 +02:00	58293354	1	62.235.20.47	3268
62.235.227.153	445	TCP
2006-08-14 11:49:57 +02:00	58293354	1	62.235.232.238	1816
62.235.227.153	135	TCP
2006-08-14 11:47:01 +02:00	58293354	1	62.235.226.187
20496	62.235.227.153	445	TCP
2006-08-14 11:39:36 +02:00	58293354	1	193.74.71.22
46824	62.235.227.153	113	TCP
2006-08-14 11:38:14 +02:00	58293354	1	62.235.108.137	3254
62.235.227.153	139	TCP
2006-08-14 11:37:13 +02:00	58293354	1	62.235.20.47	4966
62.235.227.153	445	TCP
2006-08-14 11:35:50 +02:00	58293354	1	62.235.226.187
20496	62.235.227.153	445	TCP
2006-08-14 11:35:31 +02:00	58293354	1	193.74.71.23
42109	62.235.227.153	113	TCP
2006-08-14 11:35:27 +02:00	58293354	1	193.74.71.23
42109	62.235.227.153	113	TCP
2006-08-14 11:35:16 +02:00	58293354	1	62.235.20.47	1873
62.235.227.153	139	TCP
2006-08-14 11:34:10 +02:00	58293354	1	62.215.148.56	4649
62.235.227.153	445	TCP
2006-08-14 11:32:55 +02:00	58293354	1	62.235.104.111	4699
62.235.227.153	445	TCP
2006-08-14 11:32:54 +02:00	58293354	1	62.235.232.238	3970
62.235.227.153	445	TCP
2006-08-14 11:32:52 +02:00	58293354	1	62.235.104.111	4699
62.235.227.153	445	TCP
2006-08-14 11:32:51 +02:00	58293354	1	62.235.232.238	3970
62.235.227.153	445	TCP
2006-08-14 11:31:55 +02:00	58293354	1	62.235.232.238	1967
62.235.227.153	135	TCP
2006-08-14 11:28:36 +02:00	58293354	1	62.235.235.171	3789
62.235.227.153	445	TCP
2006-08-14 11:28:26 +02:00	58293354	1	60.48.54.240
57327	62.235.227.153	137	UDP
2006-08-14 11:27:10 +02:00	58293354	1	62.235.234.149	8
62.235.227.153	8	ICMP
2006-08-14 11:27:05 +02:00	58293354	1	62.235.232.238	4195
62.235.227.153	445	TCP
2006-08-14 11:26:52 +02:00	58293354	1	62.235.223.117	1602
62.235.227.153	445	TCP
2006-08-14 11:25:59 +02:00	58293354	1	62.235.219.147
63951	62.235.227.153	445	TCP
2006-08-14 11:22:12 +02:00	58293354	1	213.41.97.210
30897	62.235.227.153	1026	UDP
2006-08-14 11:21:54 +02:00	58293354	1	62.235.57.67	2743
62.235.227.153	445	TCP
2006-08-14 11:21:44 +02:00	58293354	1	152.220.149.201
30897	62.235.227.153	1026	UDP
2006-08-14 11:21:13 +02:00	58293354	1	62.235.20.47	2779
62.235.227.153	445	TCP
2006-08-14 11:20:35 +02:00	58293354	1	192.168.0.180	3145
192.58.227.14	443	TCP	PSH,ACK


Thank you, Olivier

-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of list-request at lists.dshield.org
Sent: mercredi 16 août 2006 11:16
To: ob at scarlet.be
Subject: Welcome to the "list" mailing list

Welcome to the list at lists.dshield.org mailing list! Please note that
all posts to the lists are public. They are archived at
http://forum.dshield.org. Removing archived posts is very time
consuming and can only be done in emergencies, so please think before
posting.

To post to this list, send your email to:

  list at lists.dshield.org

General information about the mailing list is at:

  http://lists.dshield.org/mailman/listinfo/list

If you ever want to unsubscribe or change your options (eg, switch to
or from digest mode, change your password, etc.), visit your
subscription page at:

  http://lists.dshield.org/mailman/options/list/ob%40scarlet.be

You can also make such adjustments via email by sending a message to:

  list-request at lists.dshield.org

with the word `help' in the subject or body (don't include the
quotes), and you will get back a message with instructions.

You must know your password to change your options (including changing
the password, itself) or to unsubscribe.  It is:

  spoke

Normally, Mailman will remind you of your lists.dshield.org mailing
list passwords once every month, although you can disable this if you
prefer.  This reminder will also include instructions on how to
unsubscribe or change your account options.  There is also a button on
your options page that will email your current password to you.




More information about the list mailing list