Änderungen

164 Bytes hinzugefügt ,  16:05, 14. Sep. 2006
→‎Skript: besser 8)
Zeile 6: Zeile 6:  
<pre>
 
<pre>
 
#!/bin/sh
 
#!/bin/sh
 +
 
awk -F'[= ]' '/ESTABLISHED/ {
 
awk -F'[= ]' '/ESTABLISHED/ {
if(match($0,"dport=698")==0){
+
if(match($0,"dport=698")==0){
gsub(/=6662 /,"=IRC ")
+
 
gsub(/=5223 /,"=Jabber_secure ")
+
gsub(/=6667 /,"=CHAT/IRC ")
gsub(/=5222 /,"=Jabber ")
+
gsub(/=6666 /,"=CHAT/IRC ")
gsub(/=5190 /,"=AIM/ICQ ")
+
gsub(/=6665 /,"=CHAT/IRC ")
gsub(/=995 /,"=POP3_secure ")
+
gsub(/=6664 /,"=CHAT/IRC ")
gsub(/=993 /,"=IMAP_secure ")  
+
gsub(/=6663 /,"=CHAT/IRC ")
gsub(/=443 /,"=www_secure ")
+
gsub(/=6662 /,"=CHAT/IRC ")
gsub(/=143 /,"=IMAP ")
+
gsub(/=5223 /,"=CHAT/Jabber_secure ")
gsub(/=110 /,"=POP3 ")
+
gsub(/=5222 /,"=CHAT/Jabber ")
gsub(/=80 /,"=www ")                                                        
+
gsub(/=5190 /,"=CHAT/AIM/ICQ ")
gsub(/=25 /,"=sendmail ")  
+
gsub(/=1863 /,"=CHAT/MSN ")
gsub(/=22 /,"=SSH ")
+
gsub(/=995 /,"=MAIL/POP3_secure ")
printf("%-14s ---> %14s... %s %5s ---> %-5s\n",$11,substr($13,1,length($13)-3),$1,$15,$17)
+
gsub(/=993 /,"=MAIL/IMAP_secure ")
}}' /proc/net/ip_conntrack|sort|awk 'BEGIN{printf "Content-type: text/plain\n"}{if($1!=A&&S!=1&&Z>0){print "";S=1}else{print;S=0;Z=1}A=$1}'
+
gsub(/=443 /,"=www_secure ")
 +
gsub(/=411 /,"=P2P/DC++ ")
 +
gsub(/=143 /,"=MAIL/IMAP ")
 +
gsub(/=110 /,"=MAIL/POP3 ")
 +
gsub(/=80 /,"=www ")
 +
gsub(/=25 /,"=MAIL/SMTP ")
 +
gsub(/=22 /,"=SSH ")
 +
 
 +
printf("%-14s ---> %14s... %s %16s ---> %-16s\n",$11,substr($13,1,length($13)-3),$1,$15,$17)
 +
}}' /proc/net/ip_conntrack|sort|awk 'BEGIN{printf "Content-type: text/plain\n"}{if($1!=A&&S!=1&&Z>0){print "";S=1}else{print;S=0;Z=1}A=$1}'
 
</pre>
 
</pre>