XScanners IWC

Log reader and parser for pf

I am working on a new parser and reporting tool for Open/FreeBSD to parse and build reports based on the following log file.

Jun 19 05:10:02 gandalf pf: Jun 19 05:09:04.736659 rule 49/(match) pass out on dc1: 71.62.139.73.17159 > 96.17.171.19.80: S 2165519495:2165519495(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale 0,[|tcp]> (DF)

this is a pipe command right now to get the logged entries into this format, and i will soon build a OS X interface to pull the data right from the firewall. I am still thinking of wether to write it in Obj-C or Realbasic. Looking at the toolsets avail for both.

IA Controls

<pre>

class Controls < ActiveRecord::Base

belongs_to :controls_lists

def self.find_control_all

find(:all, :order => "control")

end

end

class Controls_Lists < ActiveRecord::Base

def item

@item = ControlsLists.find_by_sql("

select * from iacontrols iac

join controls c

order by ControlName

where c.id = 'iac.id'")

end

end

</pre>

New App on the Way - CA-Track

I am starting work on a new application that will run from a thumb drive(Secured and Un-Secured) and will allow Analyst and Consultants or anyone who has to track, manage and monitor DIACAP Based C&A Packages. It will be a stand-alone web app, as well as a Mac OS X, Linux and eventually a Windows Application.

Will add more details later.......

Apple Releases Darwin 9 Source Code

From OSNews

Apple has released the source code to Darwin 9, the underlying open source operating system ofMac OS X 10.5 Leopard. "Darwin is the open source UNIX-based foundation of Mac OS X. Darwin integrates a number of technologies, including the Mach 3.0 microkernel, operating system services based on FreeBSD 5 UNIX, high-performance TCP/IP networking, and support for multiple integrated file systems. Because the design of Darwin is highly modular, you can dynamically add device drivers, networking extensions, and new file systems."

Apple Releases Darwin 9 Source Code

This is what i release all my code under.

This is the copyright and lic file include with all my code, if it a script this appears at the top, if it compiled, is is displayed in the help screen for the app, all binary code is distrubuted as such, unless otherwise noted, it will and does not include the source:

ll of the documentation and software included in the 4.4BSD and 4.4BSD-Lite

Releases is copyrighted by The Regents of the University of California.

Copyright 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994

        The Regents of the University of California.  All rights reserved.

Redistribution and use in source and binary forms, with or without

modification, are permitted provided that the following conditions

are met:

1. Redistributions of source code must retain the above copyright

   notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright

   notice, this list of conditions and the following disclaimer in the

   documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software

   must display the following acknowledgement:

This product includes software developed by the University of

California, Berkeley and its contributors.

4. Neither the name of the University nor the names of its contributors

   may be used to endorse or promote products derived from this software

   without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND

ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE

FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

SUCH DAMAGE.

SNX Admin system

This is a tool that i have been working on to admin and control multiple snort sensors on a network or multiple networks. This one uses perl to read in file streams and look for potential app bugs. Here is a sample

---------------

my $fln;

foreach $fln (@toproc){

print "Processing ".$fln. "\n\n";

open ("FH", "zcat ".$fln."|") or die "cannot open!!!\n";

while (my $x=<FH>) {

if (($x =~ /xxx.xxxx.xxx.xxx/) || ($x =~ /<string>/) || ($x =~ /<string>/) || ($x =~ /<string>/)){print $x;}

}

close(FH)

}

print "\nDONE\n";

}