aspose file tools*
The moose likes Linux / UNIX and the fly likes IP/host filtering in log files? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Java 8 in Action this week in the Java 8 forum!
JavaRanch » Java Forums » Engineering » Linux / UNIX
Bookmark "IP/host filtering in log files?" Watch "IP/host filtering in log files?" New topic
Author

IP/host filtering in log files?

senthil sen
Ranch Hand

Joined: Oct 10, 2002
Posts: 184
Hello All,

I am trying to find repeated IP hits to the server in the log file or how to find which IP has the highest number of hits to the server or has done the most damaged? This is not only for IP's but also for any host name or any user having the highest entry in the server log?

Thanks,
Charles Lyons
Author
Ranch Hand

Joined: Mar 27, 2003
Posts: 836
You're welcome. Despite the question marks though, there isn't a question here, just a set of statements about what you want to do. So what have you thought about or tried, and what problems have you been having? Then we'll go from there...


Charles Lyons (SCJP 1.4, April 2003; SCJP 5, Dec 2006; SCWCD 1.4b, April 2004)
Author of OCEJWCD Study Companion for Oracle Exam 1Z0-899 (ISBN 0955160340 / Amazon Amazon UK )
Tim Holloway
Saloon Keeper

Joined: Jun 25, 2001
Posts: 15662
    
  15

Ah well, I'm not exactly fluent in malayam, tamil or urdu. I think I can see the question in there, even if it doesn't match the question marks.

First, the number of attacks isn't related to the amount of damage done. I have typically 10,000 attempts made on one of my FTP servers every day. So far they have all bounced. But it would take only one successful attack on any IP or port to get my machine owned.

On the Fedora/Red Hat architecture, there's a package called logwatch that will scan your logfiles every day and email a summary of this and other things as well. By default it gets sent to the root account on the local machine, but you can override that and send it to whomever and wherever you prefer.

Here's a small typical excerpt:


You can see that after all these years, the SQL Slammer is still alive and well!


Customer surveys are for companies who didn't pay proper attention to begin with.
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: IP/host filtering in log files?
 
Similar Threads
finding all ip address in a Network
RMI service bind/lookup problem(Very freak!)
Can't connect to the deployment manager through wsadmin tool
No suitable Driver in DB2
Unable to connect to server inside swing app