Results 1 to 4 of 4

Thread: A nice little tool.....

  1. #1
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197

    Cool A nice little tool.....

    Do you run Windows? Do you have huge log files of the activity at your firewall and on your network and find it hard to track the activity in there?

    I finally found a neat little tool that can create a new file from your logs that will extract every line that a given search string is present in. I found lots that identify the line or extract or replace the string but this is the only one I have found that pulls the entire line from the log.

    With a whole bunch of other functions available I really like the ability to have it find every instance of an IP address and pull the lines into another file so I can see all the activity of that IP address chronologically and in one single place.

    Try it.... It's fast.... 22Mb file stripped of 100 lines carrying a given IP in about 8 seconds on a 1GB/128Mb machine......

    http://www.lexacorp.com.pg/soft/linestrp.exe
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  2. #2
    Nice tool, its helps alot I'm working on a similar tool that does the same thing.
    Coded in python (if I get it to work) will put the full source on this site when finish.
    Guess I will study this tool to see how it works or maybe it will give me some good ideas.

  3. #3
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Ok..... you want a really nice feature that wouldn't be too hard to code?

    I also would like to be able to strip out the previous X lines and the subsequent Y lines around each instance of my search string if I so desire.

    For example I should be able to say find string "111.111.111.111" and also pull the previous 10 lines and the next 20 lines after each line containing this string.

    That would be handy if someone were using multiple machines to probe me or whatever. I would be able to see the pattern more easily this way if there was any inconsistency.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  4. #4
    Thanks!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •