Worm Report is a script that filters out known worm hits from the access log, and puts them into their own files named for the IP/Host that has been "wormed". A report containing the count, hostname, ip, and a guess at the parent domain is printed to STDOUT to facilitate contacting these individuals. This script is useful in the short term to get the info to the people who need it. Adding a new worm requires adding a new worm hit string to the DATA section of the script, nothing so fancy (or exhaustive) as an Apache module.
released on 21 September 2001
|License||Verified by||Verified on||Notes|
|PublicDomain||Janet Casey||21 September 2001|
Leaders and contributors
|Robert S Muhlestein||Maintainer|
Resources and communication
|Developer||VCS Repository Webview||http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/wormreport/|
|Required to build||GTK+ 1.2.0|
This entry (in part or in whole) was last reviewed on 16 July 2003.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software described in this text has its own copyright notice and license, which can usually be found in the distribution itself.