full-disclosure - Pattern matching search tool

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAA5lplkjP/20eX9TyK3ycK1QEAAAAA@online.gateway.expertworks.net>
From: aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya,
	Aditya Lalit Deshmukh)
Subject: Pattern matching search tool

 

>-----Original Message-----
>From: full-disclosure-bounces@...ts.netsys.com 
>[mailto:full-disclosure-bounces@...ts.netsys.com] On Behalf Of 
>Paul Schmehl
>Sent: Thursday, January 06, 2005 02:58 AM
>To: full-disclosure@...ts.netsys.com
>Subject: [Full-Disclosure] Pattern matching search tool
>
>Is anyone aware of a search tool (not Google or search engine 
>aggregation 
>software) that could be used to search our network for 
>"interesting stuff"? 
>It needs to be capable of doing pattern matching similar to 
>perl's regular 
>expression stuff.
>


Dear paul I think you answered your own question over here - its perl!
However there is another tool ntop that I use quite a lot.


>I'm looking for something that, for example, could tell me all 
>the machines 
>on our network that are running copies of phpBB (obvious 
>reasons) so that 
>we could quickly identify potential problem areas.


This I would use a fine tuned version of snort or 
a http proxy logging all the requests with logwatch watching for the
"intresting stuff"


-aditya