| 订阅 | 在线投稿
分享
 
 
当前位置: 王朝网络 >> perl >> yong PERL shi xian yi ge jian dan de NIDS

yong PERL shi xian yi ge jian dan de NIDS

2008-05-19 03:00:21 编辑來源:互联网 评论
 
 
 
本文为【用PERL实现一个简单的NIDS】的拼音翻译版
  sui zhe dui wang luo an quan xu qiu de shen ru kai fa , ji yu wang luo de ru qin jian ce ji shu yi jing cheng wei yi ge chong yao qie you yi si de yan jiu fang xiang 。 xiang xue xi NIDS ji shu chu le qu du yi xie xian cheng de zi liao he yi xie kai yuan xi tong de yuan ma , zui hao de ban fa mo guo yu zi ji qu xie yi ge NIDS cheng xu , zhi you na yang cai neng zhen zheng ti hui dao yi xie NIDS de shi xian xu qiu he she ji miao chu 。
  ben zhi shang shuo NIDS zhi shi yi zhong wang luo liu liang de fen xi gong ju , tong guo dui wang luo liu liang de fen xi shi bie chu yi xie yi zhi huo wei zhi de gong ji xing wei , yi ge zui jian dan de NIDS wan cheng de zhu yao gong zuo ye jiu shi zhua bao - xie yi jie ma - pi pei , zhong suo zhou zhi PERL shi ji qi qiang da de jiao ben yu yan , you qi shi ta de zi fu chuan chu li neng li ke yi fang bian di shi xian dui yu wang luo liu liang zhong e yi te zheng jin xing pi pei 。 dang ran PERL bi jing zhi shi jiao ben yu yan , ta de zhi xing xiao lv bu yuan xu yong yu zhen zheng da liu liang sheng chan xing huan jing , dan PERL de jian dan yi xue ji qiang da gong neng dui yu shi xian yi ge jian dan de NIDS da dao xue xi de mu de wu yi shi fei chang hao de , xia mian wo jie shao yi ge yong PERL shi xian de jian dan NIDS kuang jia , wo men jiang zai Linux xia shi xian ta , zai qi ta cao zuo xi tong shang lei si 。
  PERL de yi ge qiang da te xing jiu zai yu ta hai liang de CPAN mo kuai ku , hen duo ni xiang shi xian de gong neng dou ke yi zhao dao xian cheng de mo kuai , ni suo yao zuo de zhi shi an zhuang shang na xie mo kuai ji ke , guan yu PERL de mo kuai ji mian xiang dui xiang te xing de guan li he shi yong zai zhe jiu bu jie shao le , qing shen kan xiang guan zi liao , bi ru O'REILLY chu ban de 《 gao ji Perl bian cheng 》。 zai yong PERL bian xie wang luo liu liang fen xi jiao ben zhi qian , xu yao an zhuang yi xie di ceng de zhua bao ji ji ben de shu ju bao jie ma mo kuai , bao kuo ru xia zhe xie :
  http://www.tcpdump.org/release/libpcap-0.8.1.tar.gz
  di ceng ji ben de zhua bao ku 。
  http://www.cpan.org/authors/id/T/TI/TIMPOTTER/Net-Pcap-0.04.tar.gz
  libpcap de PERL jie kou 。
  http://www.cpan.org/authors/id/T/TI/TIMPOTTER/Net-PcapUtils-0.01.tar.gz
  Net-Pcap mo kuai de wrapper, bao zhuang Net-Pcap de han shu , ke yi geng fang bian di zai PERL li tiao yong zhua bao 。
  http://www.cpan.org/authors/id/T/TI/TIMPOTTER/NetPacket-0.03.tar.gz
  yong yu ji ben de IP/TCP/UDP deng bao jie ma de mo kuai , bo chu ge zhong xie yi tou , chou qu ge ge zi duan 。
  xia mian de dai ma yan shi le yi ge dai you ji ben SMB he FTP xie yi jie ma mo kuai de zui jian dan NIDS kuang jia , ci cheng xu shi xian zui jian dan de NIDS gong neng , mian xiang dan bao , bu guan xin bao de zhuang tai , bu ju bei gao ji de shang ye NIDS chan pin zhu ru liu chong zu , bao zhuang tai ji ying yong ceng xie yi de gen zong deng gong neng 。 wei le ti gao jian ce de zhun que xing , yu Snort zhi jie pi pei shu ju qu bu tong de shi , zhe ge jiao ben shi xian le liang ge ying yong ceng xie yi :SMB、FTP de jian dan jie ma , jie ma wan quan shi mian xiang NIDS de xu yao , dai ma ye mei you jing guo zai xi de ce shi ke neng cun zai wen ti , you shen me jian yi ke lian xi wo 。
  perl-ids.pl
  shi xian zhua bao ji jian ce fen xi de zhu cheng xu 。
  ------------------------------ 8< ----------------------------------------
  #!/usr/bin/perl
  #
  # Comments/suggestions to stardust at xfocus dot org
  #
  #
  # $Id: perl-ids.pl,v 1.16 2004/03/04 21:51:12 stardust Exp $
  #
  # yin yong suo you xiang guan de mo kuai
  use Net::PcapUtils;
  use NetPacket::Ethernet qw(:strip);
  use NetPacket::TCP;
  use NetPacket::IP qw(:protos);
  use NetPacket::SMB;
  use NetPacket::FTP;
  # ding yi ri zhi wen jian ming
  $workingdir = "./";
  $attacklog = "attack.log";
  $monitorlog = "monitor.log";
  # yi hou tai jin cheng fang shi yun xing
  daemon ();
  sub daemon {
  unless (fork) {
  SniffLoop ();
  exit 0;
  }
  exit 1;
  }
  # zhua bao xun huan
  sub SniffLoop {
  # jin ru gong zuo mu lu
  chdir ("$workingdir");
  # da kai ri zhi wen jian
  open (ATTACKLOG," $attacklog");
  open (MONITORLOG," $monitorlog");
  # she zhi wen jian du xie wei fei huan chong mo shi
  select(ATTACKLOG); $|++; select(MONITORLOG); $|++; select(STDOUT); $|++;
  # she zhi xin hao chu li han shu , yin wei cheng xu yun xing yu hou tai , tui chu shi xu yao li yong xin hao chu li han shu zuo xie qing li gong zuo
  $SIG{"INT"} = 'HandleINT';
  $SIG{"TERM"} = 'HandleTERM';
  # jin ru zhua bao hui tiao han shu
  Net::PcapUtils::loop(\&sniffit, SNAPLEN = 1800, Promisc = 1, FILTER = 'tcp or udp', DEV = 'eth0');
  }
  sub sniffit {
  my ($args,$header,$packet) = @_;
  # jie ma IP bao
  $ip = NetPacket::IP-decode(eth_strip($packet));
  # TCP xie yi
  if ($ip-{proto} == IP_PROTO_TCP) {
  # jie ma TCP bao
  $tcp = NetPacket::TCP-decode($ip-{data});
  # jian cha lai zi SMB ke hu duan de bao
  if (($tcp-{dest_port} == 139) || ($tcp-{dest_port} == 445)) {
  # ru guo mu de duan kou shi 139 huo 445, ren wei shi SMB xie yi bao , zuo xiang ying de jian cha
  SmbClientCheck ($ip-{src_ip},$tcp-{src_port},$ip-{dest_ip},$tcp-{dest_port},$tcp-{data});
  } elsif ($tcp-{dest_port} == 21) {
  # ru guo mu de duan kou shi 21, ren wei shi FTP xie yi , zuo xiang ying de jian cha
  FtpClientCheck ($ip-{src_ip},$tcp-{src_port},$ip-{dest_ip},$tcp-{dest_port},$tcp-{data});
  } else {}
  # UDP xie yi
  } elsif ($ip-{proto} == IP_PROTO_UDP) {
  } else {}
  }
  sub SmbClientCheck {
  my ($src_ip,$src_port,$dest_ip,$dst_port,$data) = @_;
  # tiao yong SMB jie ma mo kuai jie ma
  $smb = NetPacket::SMB-decode($data);
  # ru guo jie ma cheng gong
  if ($smb-{valid}) {
  # shi li jian ce xin jin gong bu eeye de na ge ASN.1 jie ma cuo wu dao zhi de dui po huai lou dong
  # BID:9633,9635 CVEID:CAN-2003-0818 NSFOCUSID:6000
  # ru guo SMB ming ling shi Session Setup AndX
  if ($smb-{cmd} == 0x73) {
  # ru guo she zhi le Extended Security Negotiation wei , biao shi you bao li you Security Blob
  if ($smb-{flags2} & F2_EXTSECURINEG) {
  # yong zheng ze biao da shi pi pei tong chang hui zai gong ji bao li chu xian de OID ji yin fa cuo wu de ji xing shu ju chuan
  # you yu bu shi cong yuan li shang jian ce jia zhi ASN.1 bian ma de ling huo xing , zhe yang de jian ce hui dao zhi lou bao
  if (($smb-{bytecount} 0) && ($smb-{bytes} =~ m/\x06\x06\x2b\x06\x01\x05\x05\x02.*[\xa1\x05\x23\x03\x03\x01\x07|\x84\xff\xff\xff]/)) {
  # ji ru ri zhi wen jian
  LogAlert ($src_ip,$src_port,$dest_ip,$dst_port,"ASN.1 malform encode attack!");
  }
  }
  }
  }
  }
  sub FtpClientCheck {
  my ($src_ip,$src_port,$dest_ip,$dst_port,$data) = @_;
  # tiao yong FTP jie ma mo kuai jie ma
  $ftp = NetPacket::FTP-decode($data);
  # ru guo jie ma cheng gong
  if ($ftp-{valid}) {
  # shi li jian ce xin jin gong bu de Serv-U < 5.0.0.4 ban FTP fu wu qi MDTM ming ling yi chu gong ji
  # BID:9751 NSFOCUSID:6078
  # bian li cong shu ju bao li jie ma chu lai de FTP ming ling ji qi shen shu
  for (my $i = 1;$i <= $ftp-{cmdcount};$i++) {
  my $cmd = "cmd"."$i";
  my $para = "para"."$i";
  # ru guo FTP ming ling shi MDTM
  if (uc($ftp-{$cmd}) eq "MDTM") {
  # yong zheng ze biao da shi pi pei yin fa yi chu de shen shu chuan , zhe li ti xian le zheng ze
  # biao da shi de qiang da , yong ci pi pei ke yi cong yuan li shang jian ce dao ji xing shen shu chuan
  if ($ftp-{$para} =~ m/\d{14}[+|-]\S{5,}\s+\S{1,}/) {
  LogAlert ($src_ip,$src_port,$dest_ip,$dst_port,"Serv-U < v5.0.0.4 MDTM command long timezone string overflow attack!");
  }
  }
  }
  }
  }
  # ji lu gong ji gao jing
  sub LogAlert {
  my ($src_ip,$src_port,$dest_ip,$dst_port,$message) = @_;
  my $nowtime = localtime;
  printf ATTACKLOG ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);
  printf ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);
  }
  # ji lu jian kong xin xi
  sub LogMonitor {
  my ($src_ip,$src_port,$dest_ip,$dst_port,$message) = @_;
  my $nowtime = localtime;
  printf MONITORLOG ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);
  printf ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);
  }
  # INT xin hao chu li li cheng
  sub HandleINT {
  CleanUp ();
  exit (0);
  }
  # TERM xin hao chu li li cheng
  sub HandleTERM {
  CleanUp ();
  exit (0);
  }
  # qing li , zhu yao gong zuo shi guan bi wen jian ju bing
  sub CleanUp {
  close (ATTACKLOG); close (MONITORLOG);
  }
  ------------------------------ 8< ----------------------------------------
  FTP.pm
  FTP xie yi jie ma mo kuai , chou qu shu ju bao li de FTP ming ling ji xiang ying de shen shu , ci wen jian xu yao kao bei dao NetPacket xi lie mo kuai suo zai de mu lu , tong chang shi zai /usr/lib/perl5/site_perl/5.x.x/NetPacket/
  ------------------------------ 8< ----------------------------------------
  #
  # NetPacket::FTP - Decode FTP packets
  #
  # Comments/suggestions to stardust at xfocus dot org
  #
  #
  # $Id: FTP.pm,v 1.16 2004/03/03 l1:16:20 stardust Exp $
  #【原文】【汉音对照
 
 
 
 
 
 
 
 
 
日版宠物情人插曲《Winding Road》歌词

日版宠物情人2017的插曲,很带节奏感,日语的,女生唱的。 最后听见是在第8集的时候女主手割伤了,然后男主用嘴帮她吸了一下,插曲就出来了。 歌手:Def...

兄弟共妻,我成了他们夜里的美食

老钟家的两个儿子很特别,就是跟其他的人不太一样,魔一般的执着。兄弟俩都到了要结婚的年龄了,不管自家老爹怎么磨破嘴皮子,兄弟俩说不娶就不娶,老父母为兄弟两操碎了心...

如何磨出破洞牛仔裤?牛仔裤怎么剪破洞?

把牛仔裤磨出有线的破洞 1、具体工具就是磨脚石,下面垫一个硬物,然后用磨脚石一直磨一直磨,到把那块磨薄了,用手撕开就好了。出来的洞啊很自然的。需要猫须的话调几...

我就是扫描下图得到了敬业福和爱国福

先来看下敬业福和爱国福 今年春节,支付宝再次推出了“五福红包”活动,表示要“把欠大家的敬业福都还给大家”。 今天该活动正式启动,和去年一样,需要收集“五福”...

冰箱异味产生的原因和臭味去除的方法

有时候我们打开冰箱就会闻到一股异味,冰箱里的这种异味是因为一些物质发出的气味的混合体,闻起来让人恶心。 产生这些异味的主要原因有以下几点。 1、很多人有这种习...

 
 
   sui zhe dui wang luo an quan xu qiu de shen ru kai fa , ji yu wang luo de ru qin jian ce ji shu yi jing cheng wei yi ge chong yao qie you yi si de yan jiu fang xiang 。 xiang xue xi NIDS ji shu chu le qu du yi xie xian cheng de zi liao he yi xie kai yuan xi tong de yuan ma , zui hao de ban fa mo guo yu zi ji qu xie yi ge NIDS cheng xu , zhi you na yang cai neng zhen zheng ti hui dao yi xie NIDS de shi xian xu qiu he she ji miao chu 。    ben zhi shang shuo NIDS zhi shi yi zhong wang luo liu liang de fen xi gong ju , tong guo dui wang luo liu liang de fen xi shi bie chu yi xie yi zhi huo wei zhi de gong ji xing wei , yi ge zui jian dan de NIDS wan cheng de zhu yao gong zuo ye jiu shi zhua bao - xie yi jie ma - pi pei , zhong suo zhou zhi PERL shi ji qi qiang da de jiao ben yu yan , you qi shi ta de zi fu chuan chu li neng li ke yi fang bian di shi xian dui yu wang luo liu liang zhong e yi te zheng jin xing pi pei 。 dang ran PERL bi jing zhi shi jiao ben yu yan , ta de zhi xing xiao lv bu yuan xu yong yu zhen zheng da liu liang sheng chan xing huan jing , dan PERL de jian dan yi xue ji qiang da gong neng dui yu shi xian yi ge jian dan de NIDS da dao xue xi de mu de wu yi shi fei chang hao de , xia mian wo jie shao yi ge yong PERL shi xian de jian dan NIDS kuang jia , wo men jiang zai Linux xia shi xian ta , zai qi ta cao zuo xi tong shang lei si 。   PERL de yi ge qiang da te xing jiu zai yu ta hai liang de CPAN mo kuai ku , hen duo ni xiang shi xian de gong neng dou ke yi zhao dao xian cheng de mo kuai , ni suo yao zuo de zhi shi an zhuang shang na xie mo kuai ji ke , guan yu PERL de mo kuai ji mian xiang dui xiang te xing de guan li he shi yong zai zhe jiu bu jie shao le , qing shen kan xiang guan zi liao , bi ru O'REILLY chu ban de 《 gao ji Perl bian cheng 》。 zai yong PERL bian xie wang luo liu liang fen xi jiao ben zhi qian , xu yao an zhuang yi xie di ceng de zhua bao ji ji ben de shu ju bao jie ma mo kuai , bao kuo ru xia zhe xie :   http://www.tcpdump.org/release/libpcap-0.8.1.tar.gz    di ceng ji ben de zhua bao ku 。   http://www.cpan.org/authors/id/T/TI/TIMPOTTER/Net-Pcap-0.04.tar.gz   libpcap de PERL jie kou 。   http://www.cpan.org/authors/id/T/TI/TIMPOTTER/Net-PcapUtils-0.01.tar.gz   Net-Pcap mo kuai de wrapper, bao zhuang Net-Pcap de han shu , ke yi geng fang bian di zai PERL li tiao yong zhua bao 。   http://www.cpan.org/authors/id/T/TI/TIMPOTTER/NetPacket-0.03.tar.gz    yong yu ji ben de IP/TCP/UDP deng bao jie ma de mo kuai , bo chu ge zhong xie yi tou , chou qu ge ge zi duan 。    xia mian de dai ma yan shi le yi ge dai you ji ben SMB he FTP xie yi jie ma mo kuai de zui jian dan NIDS kuang jia , ci cheng xu shi xian zui jian dan de NIDS gong neng , mian xiang dan bao , bu guan xin bao de zhuang tai , bu ju bei gao ji de shang ye NIDS chan pin zhu ru liu chong zu , bao zhuang tai ji ying yong ceng xie yi de gen zong deng gong neng 。 wei le ti gao jian ce de zhun que xing , yu Snort zhi jie pi pei shu ju qu bu tong de shi , zhe ge jiao ben shi xian le liang ge ying yong ceng xie yi :SMB、FTP de jian dan jie ma , jie ma wan quan shi mian xiang NIDS de xu yao , dai ma ye mei you jing guo zai xi de ce shi ke neng cun zai wen ti , you shen me jian yi ke lian xi wo 。   perl-ids.pl    shi xian zhua bao ji jian ce fen xi de zhu cheng xu 。   ------------------------------ 8< ----------------------------------------   #!/usr/bin/perl   #   # Comments/suggestions to stardust at xfocus dot org   #   #   # $Id: perl-ids.pl,v 1.16 2004/03/04 21:51:12 stardust Exp $   #   # yin yong suo you xiang guan de mo kuai   use Net::PcapUtils;   use NetPacket::Ethernet qw(:strip);   use NetPacket::TCP;   use NetPacket::IP qw(:protos);   use NetPacket::SMB;   use NetPacket::FTP;   # ding yi ri zhi wen jian ming   $workingdir = "./";   $attacklog = "attack.log";   $monitorlog = "monitor.log";   # yi hou tai jin cheng fang shi yun xing   daemon ();   sub daemon {   unless (fork) {   SniffLoop ();   exit 0;   }   exit 1;   }   # zhua bao xun huan   sub SniffLoop {   # jin ru gong zuo mu lu   chdir ("$workingdir");   # da kai ri zhi wen jian   open (ATTACKLOG," $attacklog");   open (MONITORLOG," $monitorlog");   # she zhi wen jian du xie wei fei huan chong mo shi   select(ATTACKLOG); $|++; select(MONITORLOG); $|++; select(STDOUT); $|++;   # she zhi xin hao chu li han shu , yin wei cheng xu yun xing yu hou tai , tui chu shi xu yao li yong xin hao chu li han shu zuo xie qing li gong zuo   $SIG{"INT"} = 'HandleINT';   $SIG{"TERM"} = 'HandleTERM';   # jin ru zhua bao hui tiao han shu   Net::PcapUtils::loop(\&sniffit, SNAPLEN = 1800, Promisc = 1, FILTER = 'tcp or udp', DEV = 'eth0');   }   sub sniffit {   my ($args,$header,$packet) = @_;   # jie ma IP bao   $ip = NetPacket::IP-decode(eth_strip($packet));   # TCP xie yi   if ($ip-{proto} == IP_PROTO_TCP) {   # jie ma TCP bao   $tcp = NetPacket::TCP-decode($ip-{data});   # jian cha lai zi SMB ke hu duan de bao   if (($tcp-{dest_port} == 139) || ($tcp-{dest_port} == 445)) {   # ru guo mu de duan kou shi 139 huo 445, ren wei shi SMB xie yi bao , zuo xiang ying de jian cha   SmbClientCheck ($ip-{src_ip},$tcp-{src_port},$ip-{dest_ip},$tcp-{dest_port},$tcp-{data});   } elsif ($tcp-{dest_port} == 21) {   # ru guo mu de duan kou shi 21, ren wei shi FTP xie yi , zuo xiang ying de jian cha   FtpClientCheck ($ip-{src_ip},$tcp-{src_port},$ip-{dest_ip},$tcp-{dest_port},$tcp-{data});   } else {}   # UDP xie yi   } elsif ($ip-{proto} == IP_PROTO_UDP) {   } else {}   }   sub SmbClientCheck {   my ($src_ip,$src_port,$dest_ip,$dst_port,$data) = @_;   # tiao yong SMB jie ma mo kuai jie ma   $smb = NetPacket::SMB-decode($data);   # ru guo jie ma cheng gong   if ($smb-{valid}) {   # shi li jian ce xin jin gong bu eeye de na ge ASN.1 jie ma cuo wu dao zhi de dui po huai lou dong   # BID:9633,9635 CVEID:CAN-2003-0818 NSFOCUSID:6000   # ru guo SMB ming ling shi Session Setup AndX   if ($smb-{cmd} == 0x73) {   # ru guo she zhi le Extended Security Negotiation wei , biao shi you bao li you Security Blob   if ($smb-{flags2} & F2_EXTSECURINEG) {   # yong zheng ze biao da shi pi pei tong chang hui zai gong ji bao li chu xian de OID ji yin fa cuo wu de ji xing shu ju chuan   # you yu bu shi cong yuan li shang jian ce jia zhi ASN.1 bian ma de ling huo xing , zhe yang de jian ce hui dao zhi lou bao   if (($smb-{bytecount} 0) && ($smb-{bytes} =~ m/\x06\x06\x2b\x06\x01\x05\x05\x02.*[\xa1\x05\x23\x03\x03\x01\x07|\x84\xff\xff\xff]/)) {   # ji ru ri zhi wen jian   LogAlert ($src_ip,$src_port,$dest_ip,$dst_port,"ASN.1 malform encode attack!");   }   }   }   }   }   sub FtpClientCheck {   my ($src_ip,$src_port,$dest_ip,$dst_port,$data) = @_;   # tiao yong FTP jie ma mo kuai jie ma   $ftp = NetPacket::FTP-decode($data);   # ru guo jie ma cheng gong   if ($ftp-{valid}) {   # shi li jian ce xin jin gong bu de Serv-U < 5.0.0.4 ban FTP fu wu qi MDTM ming ling yi chu gong ji   # BID:9751 NSFOCUSID:6078   # bian li cong shu ju bao li jie ma chu lai de FTP ming ling ji qi shen shu   for (my $i = 1;$i <= $ftp-{cmdcount};$i++) {   my $cmd = "cmd"."$i";   my $para = "para"."$i";   # ru guo FTP ming ling shi MDTM   if (uc($ftp-{$cmd}) eq "MDTM") {   # yong zheng ze biao da shi pi pei yin fa yi chu de shen shu chuan , zhe li ti xian le zheng ze   # biao da shi de qiang da , yong ci pi pei ke yi cong yuan li shang jian ce dao ji xing shen shu chuan   if ($ftp-{$para} =~ m/\d{14}[+|-]\S{5,}\s+\S{1,}/) {   LogAlert ($src_ip,$src_port,$dest_ip,$dst_port,"Serv-U < v5.0.0.4 MDTM command long timezone string overflow attack!");   }   }   }   }   }   # ji lu gong ji gao jing   sub LogAlert {   my ($src_ip,$src_port,$dest_ip,$dst_port,$message) = @_;   my $nowtime = localtime;   printf ATTACKLOG ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);   printf ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);   }   # ji lu jian kong xin xi   sub LogMonitor {   my ($src_ip,$src_port,$dest_ip,$dst_port,$message) = @_;   my $nowtime = localtime;   printf MONITORLOG ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);   printf ("%s\t%s:%s - %s:%s\t%s\n",$nowtime,$src_ip,$src_port,$dest_ip,$dst_port,$message);   }   # INT xin hao chu li li cheng   sub HandleINT {   CleanUp ();   exit (0);   }   # TERM xin hao chu li li cheng   sub HandleTERM {   CleanUp ();   exit (0);   }   # qing li , zhu yao gong zuo shi guan bi wen jian ju bing   sub CleanUp {   close (ATTACKLOG); close (MONITORLOG);   }   ------------------------------ 8< ----------------------------------------   FTP.pm   FTP xie yi jie ma mo kuai , chou qu shu ju bao li de FTP ming ling ji xiang ying de shen shu , ci wen jian xu yao kao bei dao NetPacket xi lie mo kuai suo zai de mu lu , tong chang shi zai /usr/lib/perl5/site_perl/5.x.x/NetPacket/   ------------------------------ 8< ----------------------------------------   #   # NetPacket::FTP - Decode FTP packets   #   # Comments/suggestions to stardust at xfocus dot org   #   #   # $Id: FTP.pm,v 1.16 2004/03/03 l1:16:20 stardust Exp $   #
󰈣󰈤
  免责声明:本文仅代表作者个人观点,与王朝网络无关。王朝网络登载此文出于传递更多信息之目的,并不意味着赞同其观点或证实其描述,其原创性以及文中陈述文字和内容未经本站证实,对本文以及其中全部或者部分内容、文字的真实性、完整性、及时性本站不作任何保证或承诺,请读者仅作参考,并请自行核实相关内容。
 
 
华丽的模特拍摄(8)
华丽的模特拍摄(7)
华丽的模特拍摄(6)
华丽的模特拍摄(5)
八里沟
朝阳宫
天下峨眉 云上金顶
老家(四)
 
>>返回首页<<
 
 
 为你推荐
 
 
 
 转载本文
 UBB代码 HTML代码
复制到剪贴板...
 
 热帖排行
 
 
 
 
 
©2005- 王朝网络 版权所有