Skip to content

Commit

Permalink
Bugfix: Improve matching on MY_IP for ICMP/sponge
Browse files Browse the repository at this point in the history
  • Loading branch information
listerr committed Oct 9, 2020
1 parent e79e700 commit 6180761
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 7 deletions.
6 changes: 3 additions & 3 deletions Changelog
Original file line number Diff line number Diff line change
@@ -1,3 +1,5 @@
* 1.12 - 2020-10-09 - robl
- Bugfix: Improve matching on MY_IP for ICMP/sponge.

* 1.11 - 2020-08-24 - <[email protected]>
- Roll in some LONAP changes.
Expand Down Expand Up @@ -98,6 +100,4 @@
Requires that /sbin/ip be suid root if non-root users wish to run it.

* 1.5 - 2003-01-28 - <[email protected]>
Initial release.


Initial release.
8 changes: 4 additions & 4 deletions bin/ixp-watch
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
#!/bin/bash
# ixp-watch version: 1.11
# ixp-watch version: 1.12
# This file is part of IXP Watch
#
# IXP Watch is free software: you can redistribute it and/or modify it
Expand Down Expand Up @@ -426,15 +426,15 @@ done
# Take the ICMP output and munge it to report:
#
# Old version of tshark:
# grep -v "$MY_IP" $TEMP_DIR/icmp.$$ | awk '{print $3" "$4" "$5" "$6" "$7" "$8" "$10" "$11}' | sort | uniq -c | sort -rn > $LOG_ROOT/ICMP.LOG
# grep -vw "$MY_IP" $TEMP_DIR/icmp.$$ | awk '{print $3" "$4" "$5" "$6" "$7" "$8" "$10" "$11}' | sort | uniq -c | sort -rn > $LOG_ROOT/ICMP.LOG
#
# New version of tshark:
grep -v "$MY_IP" $TEMP_DIR/icmp.$$ | awk '{print $3" "$4" "$5" "$6" "$7" "$8" "$10}' | sort | uniq -c | sort -rn > $LOG_ROOT/ICMP.LOG
grep -vw "$MY_IP" $TEMP_DIR/icmp.$$ | awk '{print $3" "$4" "$5" "$6" "$7" "$8" "$10}' | sort | uniq -c | sort -rn > $LOG_ROOT/ICMP.LOG

# Find arp responses that are not for me, that I'm responding to,
# so they must be sponged addresses.

cat $TEMP_DIR/arps.$$ | grep -v $MY_IP | grep "is at $MY_ETHER" | awk '{print $5" arping for sponged address "$8}' | sort | uniq -c | sort -rn > $LOG_ROOT/ARPSPONGE.LOG
cat $TEMP_DIR/arps.$$ | grep -vw $MY_IP | grep "is at $MY_ETHER" | awk '{print $5" arping for sponged address "$8}' | sort | uniq -c | sort -rn > $LOG_ROOT/ARPSPONGE.LOG

# Find the top arpers:
# ARP Output has changed for some reason they've bunged an extra word in there: (2013-12)
Expand Down

0 comments on commit 6180761

Please sign in to comment.