Browsing the generated HTML-File of snortsnarf I clicked 'GeekTools' to resolve a IP-Adress. The link is http://www.geektools.com/cgi-bin/proxy.cgi?query=212.187.170.6&targetnic=auto but I got: The CGI version of the GeekTools Whois Proxy has been replaced by a PHP web page. You will find the new page here: http://www.geektools.com/whois.php Please update your bookmarks to reflect the change. Reproducible: Always Steps to Reproduce: 1. 2. 3.
the new link ask for a key, it seems that option will be useless from now on
Here is a similar problem with the genereated files from snortsnarf, I copied the text directly from my email =========================================================================== On Fri, 18 Feb 2005, Toralf F
Here is a similar problem with the genereated files from snortsnarf, I copied the text directly from my email =========================================================================== On Fri, 18 Feb 2005, Toralf Förster wrote: > while accessing the link > http://andrew.triumf.ca/cgi-bin/prwhois.cgi?overrideurl=1&url=rwhois%3A% > 2F%2Frwhois.arin.net%3A4321&port=4321&query=212.187.170.12 This is an old script that probably pre-dates a system upgrade or two. it seems to fail because it cannot find an Rwhois module, and I don't see one on CPAN. Perhaps rwhois is defunct. regards -- Andrew Daviel, TRIUMF, Canada Tel. +1 (604) 222-7376 (Pacific Time) security@triumf.ca ===========================================================================
Created attachment 54566 [details] snortsnarf-050314.1.diff In order to remove obsolete geektools option.... Toralf, how do you get the other error?...
'DNS lookup at:' points to nirvana for 'Amensi', BTW snortsnarf.pl -h says for option 'minprio': ... -minprio=<min> Don't show alerts with priority higher than <min> ... Do you mean instead '... *lower* than <min>' ?
Hi Toralf, still there? do you find more errors? :P
Created attachment 70871 [details] snortsnarf genereted destination Hi, I attached a current snortsnarf-generated dest.-ip-file. The Whois-Lookup doesn't work for Arnin and Geek-Tools, DNS dosn't work at least for Amenesi and Princeton.n
thanks Toralf, it seems itsnt useful tu fix it because itsnt offically maintained any more... sorry
app removed from portage ...