{"id":6,"date":"2006-08-09T00:14:53","date_gmt":"2006-08-08T15:14:53","guid":{"rendered":"http:\/\/qos.mine.nu\/wordpress\/?p=6"},"modified":"2006-08-09T00:14:53","modified_gmt":"2006-08-08T15:14:53","slug":"iptables-log-analyzer-1","status":"publish","type":"post","link":"https:\/\/qos.dev7.net\/wordpress\/2006\/08\/iptables-log-analyzer-1.html","title":{"rendered":"IPTables log analyzer"},"content":{"rendered":"
\u3053\u306e\u8a18\u4e8b\u306f\uff12\u5e74\u4ee5\u4e0a\u524d\u306b\u66f8\u3044\u305f\u3082\u306e\u3067\u3059\u3002\r\n\u305d\u306e\u305f\u3081\u60c5\u5831\u304c\u53e4\u3044\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3054\u4e86\u627f\u304f\u3060\u3055\u3044\u3002m(_ _)m<\/div>

iptables\u3067\u30ed\u30b0\u3092\u5410\u304f\u3088\u3046\u306b\u3057\u3066\u3044\u308b\u3051\u3069\u3001\u591a\u3059\u304e\u308b\u306e\u3067\u89e3\u6790\u3059\u308b\u306e\u5927\u5909\u3002
\n\u3067\u3001IPTables log analyzer\u3092\u5165\u308c\u3066\u307f\u307e\u3057\u305f\u3002
\n% tar zxvfp iptables_logger_v0.4.tar.gz
\n% cd iptables
\n% view doc\/faq.html \u2190 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u65b9\u6cd5\u304c\u66f8\u3044\u3066\u3042\u308b<\/strong>
\n% mysql -u root -p
\nmysql> create database iptables;
\nQuery OK, 1 row affected (0.00 sec)
\n— \u7ba1\u7406\u8005\u30e6\u30fc\u30b6\u4f5c\u6210<\/strong>
\nmysql> grant create,select,insert on iptables.* to iptables_admin@localhost identified by ‘iptables_admin_password’;
\nQuery OK, 0 rows affected (0.01 sec)
\n— \u4e00\u822c\u30e6\u30fc\u30b6\u4f5c\u6210<\/strong>
\nmysql> grant select on iptables.* to iptables_user@localhost identified by ‘iptables_user_password’;
\nQuery OK, 0 rows affected (0.00 sec)
\n— \u4e00\u822c\u30e6\u30fc\u30b6\u306e\u53c2\u7167\u6a29\u8ffd\u52a0<\/strong>
\nmysql> grant create temporary tables on iptables.* to iptables_user@localhost identified by ‘iptables_user_password’;
\nQuery OK, 0 rows affected (0.00 sec)
\nmysql> quit
\n% cat sql\/db.sql | mysql -u iptables_admin -p iptables
\n% su
\n# iptables\u306e\u53e9\u304d\u65b9\u306ffaq\u306b\u66f8\u3044\u3066\u3042\u3063\u305f\u307e\u307e\u3002<\/strong>
\n# iptables -t nat -A PREROUTING -p tcp –dport 0:1024 -j LOG –log-tcp-options –log-ip-options –log-prefix ‘[IPTABLES DROP] : ‘
\n# iptables -t nat -A PREROUTING -p udp –dport 0:1024 -j LOG –log-tcp-options –log-ip-options –log-prefix ‘[IPTABLES DROP] : ‘
\n# cp -pr web \/var\/www\/iptables
\n# php\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u5909\u66f4<\/strong>
\n# vi \/var\/www\/iptables\/config.php
\n32 # Password of the MySQL database
\n33 $db_password=”iptables_user_password”;
\n:
\n:
\n38 # URL Path to your installation
\n39 $url_base=”\/iptables\/”;
\n:
\n:
\n41 #debug mode
\n42 $debug=0;
\n# \u30ed\u30b0\u53ce\u96c6\u30c7\u30fc\u30e2\u30f3(?)\u306e\u8a2d\u5b9a\u3092\u5909\u66f4
\n# vi scripts\/feed_db.pl
\n37 my $db_password = ‘iptables_admin_password’;
\n38 my $log_file = ‘\/var\/log\/messages’;
\n# cp -p scripts\/feed_db.pl \/usr\/local\/bin\/
\n# scripts\/iptablelog\u304cvine\u7528\u3067\u306a\u304b\u3063\u305f\u305f\u3081\u3001\u30d1\u30c3\u30c1\u3092\u4f5c\u6210\u3057\u3066\u5f53\u3066\u308b\u3002<\/strong>
\n# cat iptablelog.patch
\ndiff -Naur scripts\/iptablelog.org scripts\/iptablelog
\n— scripts\/iptablelog.org 2006-08-08 23:24:06.000000000 +0900
\n+++ scripts\/iptablelog 2006-08-08 23:22:13.000000000 +0900
\n@@ -12,6 +12,10 @@
\nLONGNAME=”iptables logfile analyzer”
\nNAME=”iptablelog”
\nDAEMON=’\/usr\/local\/bin\/feed_db.pl’
\n+pid=\/var\/run\/$NAME.pid
\n+
\n+. \/etc\/rc.d\/init.d\/functions
\n+. \/etc\/sysconfig\/network
\nset -e
\n@@ -19,12 +23,12 @@
\ncase $1 in
\nstart)
\necho -n “Starting $LONGNAME: “;
\n– start-stop-daemon –start –quiet –pidfile \/var\/run\/$NAME.pid –exec $DAEMON — –background
\n– echo $NAME;
\n+ $DAEMON –background
\n+ echo
\n;;
\nstop)
\necho -n “Stopping $LONGNAME: ”
\n– start-stop-daemon –stop –quiet –pidfile \/var\/run\/$NAME.pid || true
\n+ kill `cat $pid`
\nrm -f \/var\/run\/$NAME.pid
\necho $NAME
\n;;
\n# patch -p0 < iptablelog.patch\n# cp -p scripts\/iptablelog \/etc\/init.d\/\n# Apache\u518d\u8d77\u52d5<\/strong>
\n# \/etc\/init.d\/iptablelog start
\n\u2193\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8
\n\"iptables_logana.png\"<\/a>
\n\u5fae\u5999\u306b\u5931\u6557\u3057\u3066\u308b\u6c17\u304c\u3002\u3002\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u3053\u306e\u8a18\u4e8b\u306f\uff12\u5e74\u4ee5\u4e0a\u524d\u306b\u66f8\u3044\u305f\u3082\u306e\u3067\u3059\u3002 \u305d\u306e\u305f\u3081\u60c5\u5831\u304c\u53e4\u3044\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3054\u4e86\u627f\u304f\u3060\u3055\u3044\u3002m(_ _)miptables\u3067\u30ed\u30b0\u3092\u5410\u304f\u3088\u3046\u306b\u3057\u3066\u3044\u308b\u3051\u3069\u3001\u591a\u3059\u304e\u308b\u306e\u3067\u89e3\u6790\u3059\u308b\u306e\u5927\u5909\u3002 \u3067\u3001IPTables log ana … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[29,33,76,28],"class_list":["post-6","post","type-post","status-publish","format-standard","hentry","category-auafafcc","tag-apache","tag-iptables","tag-network","tag-php"],"_links":{"self":[{"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/posts\/6","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/comments?post=6"}],"version-history":[{"count":0,"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/posts\/6\/revisions"}],"wp:attachment":[{"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/media?parent=6"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/categories?post=6"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qos.dev7.net\/wordpress\/wp-json\/wp\/v2\/tags?post=6"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}