Subject: [fwtk-users] Fwd: unable to post

From: Rick Murphy <[email-masked]>
Date: Sun, 03 Mar 2002 16:52:44 -0500

Forwarding as requested..
         -Rick

>Date: Mon, 25 Feb 2002 17:25:56 -0800 (PST)
>From: David Lang <[email-masked]>
>To: [email-masked]
>Subject: unable to post
>
>Rick, I am unable to post to the fwtk-users list (my sending email address
>changed and I am having trouble getting the listserver to let me subscribe
>under the new one) could you post this to the list for me?
>
>David Lang
>
> >From [email-masked] Mon Feb 25 17:20:17 2002
>Date: Mon, 25 Feb 2002 19:08:51 -0600
>From: ListManager <[email-masked]>
>Reply-To: ListManager <[email-masked]>
>To: [email-masked]
>Subject: Re: plug-summ.sh
>
>Sorry, but ListManager did not find your email address
>-> "[email-masked]"
>
>listed as a member of fwtk-users.
>
>Only members of fwtk-users are allowed to contribute messages.
>
>Because ListManager could not confirm that you are a member of fwtk-users,
>your message was not accepted.
>
>---
>
>Return-Path: <[email-masked]>
>Received: from [209.195.52.30] ([209.195.52.114]) by listserv.nai.com with 
>SMTP (ListManager WIN32 version 4.2); Mon, 25 Feb 2002 19:08:50 -0600
>Received: from MAIL ([10.3.84.114]) by [209.195.52.30]
>           via smtpd (for listserv.nai.com [161.69.213.6]) with SMTP; 26 
> Feb 2002 01:38:18 UT
>Received: from atlexc01.digitalinsight.com ([10.2.43.7] (may be forged))
>           by mail.nfront.com (2.6 Build 1 (Berkeley 8.8.6)/8.8.4) with ESMTP
>           id UAA09356 for <[email-masked]>; Mon, 25 Feb 2002 
> 20:15:29 -0500
>Received: by ATLEXC01 with Internet Mail Service (5.5.2653.19)
>         id <1YC9914H>; Mon, 25 Feb 2002 20:13:03 -0500
>Received: from dlang.diginsite.com ([10.201.10.67]) by 
>calexc01.digitalinsight.com with SMTP (Microsoft Exchange Internet Mail 
>Service Version 5.5.2653.13)
>         id FACZGYZD; Mon, 25 Feb 2002 17:16:28 -0800
>From: David Lang <[email-masked]>
>To: [email-masked]
>Date: Mon, 25 Feb 2002 17:13:27 -0800 (PST)
>Subject: plug-summ.sh
>Message-ID: <[email-masked]>
>MIME-Version: 1.0
>Content-Type: TEXT/PLAIN; charset=US-ASCII
>
>in working on getting reasonable log reports for some of my firewalls I
>adapted the ftp-summ.sh script to report on plug-gw connections instead.
>
>I also added logic to have it report on any strange messages that
>appear.
>
>As the list does not accept attachments the full script is included below.
>
>David Lang
>
>#!/bin/sh
>#
>#  Copyright (c) 1993, Trusted Information Systems, Incorporated
>#  All rights reserved.
>#
>#  Redistribution and use are governed by the terms detailed in the
>#  license document ("LICENSE") included with the toolkit.
>#
>
>#
>#       Author: Marcus J. Ranum, Trusted Information Systems, Inc.
>#
>
>#
># MODIFIED 2-25-2002 by David Lang from the ftp-summ.sh script to
>#   analyse the useage of plug-gwB
>#
>
># THIS SCRIPT EXPECTS TO READ syslog() style log entries on its
># standard input
>
>
>TMPS="/tmp/.permnet /tmp/.permden /tmp/.permdtot /tmp/.permtot \
>         /tmp/.permsrv /tmp/.bytesin /tmp/.bytesout /tmp/.totalin 
> /tmp/.totalout"
>rm -f $TMPS
>
>grep 'plug-gw.*:' | awk '
>
>BEGIN {
>         total_permitted = 0;
>         total_phosts = 0;
>         total_denied = 0;
>         total_dhosts = 0;
>         total_input = 0;
>         total_output = 0;
>         total_errors = 0;
>}
>
>
>$6 == "deny" {
>         total_denied++;
>         x = substr($7,6) " -> " substr($8,9);
>         if(!denies[x])
>                 total_dhosts++;
>         denies[x]++;
>}
>
>
>$6 == "disconnect" {
>         x = substr($7,6) " -> " substr($8,13);
>         total_permitted++;
>         if(!permits[x])
>                 total_phosts++;
>         permits[x]++;
>         bytesin[x] += substr($9,4) / 1024;
>         total_input += substr($9,4) / 1024;
>         bytesout[x] += substr($10,5) / 1024;
>         total_output += substr($10,5) / 1024;
>}
>
>$6 != "disconnect" && $6 != "deny" && $6 != "connect" {
>         x = "";
>         for(i=6; i<NF+1; ++i)
>             x = x " " $i;
>         total_errors++;
>         error[x]++;
>}
>
>END {
>         if(total_permitted > 0) {
>                 for(c in permits)
>                         printf("%d %s\n",permits[c],c) >> "/tmp/.permnet";
>         }
>         printf("%d\n",total_permitted) > "/tmp/.permtot";
>
>
>         if(total_denied > 0) {
>                 for(c in denies)
>                         printf("%d %s\n",denies[c],c) >> "/tmp/.permden";
>         }
>         printf("%d\n",total_denied) > "/tmp/.permdtot";
>
>
>         if(total_input > 0) {
>                 for(c in bytesin)
>                         if(bytesin[c] > 0)
>                         printf("%d %s\n",bytesin[c],c) >> "/tmp/.bytesin";
>         }
>         printf("%d\n",total_input) > "/tmp/.totalin";
>
>
>         if(total_output > 0) {
>                 for(c in bytesout)
>                         if(bytesout[c] > 0)
>                         printf("%d %s\n",bytesout[c],c) >> "/tmp/.bytesout";
>         }
>         printf("%d\n",total_output) > "/tmp/.totalout";
>
>         if(total_errors > 0) {
>                 printf("unknown messages \n");
>                 for(c in error)
>                       printf("%d %s\n",error[c],c);
>         }
>}'
>
>
>if [ -s /tmp/.permnet -a -s /tmp/.permtot ]; then
>echo
>echo "Plug service users (total: `cat /tmp/.permtot`)"
>echo "Connects      Host/Address"
>echo "--------      ------------"
>sort -r -n /tmp/.permnet | awk '{ printf("%-13d %s\n",$1,$2); }'
>fi
>
>
>if [ -s /tmp/.permden -a -s /tmp/.permdtot ]; then
>echo
>echo "Denied FTP service users (total: `cat /tmp/.permdtot`)"
>echo "Connects      Host/Address"
>echo "--------      ------------"
>sort -r -n /tmp/.permden | awk '{ printf("%-13d %s\n",$1,$2); }'
>fi
>
>
>if [ -s /tmp/.totalout -a -s /tmp/.bytesout ]; then
>echo
>echo "Plug service output thruput (total Kbytes: `cat /tmp/.totalout`)"
>echo "KBytes        Host/Address"
>echo "------        ------------"
>sort -r -n /tmp/.bytesout | awk '{ printf("%-13d %s\n",$1,$2); }'
>fi
>
>
>if [ -s /tmp/.totalin -a -s /tmp/.bytesin ]; then
>echo
>echo "Plug service input thruput (total Kbytes: `cat /tmp/.totalin`)"
>echo "KBytes        Host/Address"
>echo "------        ------------"
>sort -r -n /tmp/.bytesin | awk '{ printf("%-13d %s\n",$1,$2); }'
>fi
>
>rm -f $TMPS

---
You are currently subscribed to fwtk-users as: [email-masked]
To unsubscribe send a blank email to [email-masked]