NAME
Lire::WWW::Filename - analyze filenames
SYNOPSIS
use Lire::WWW::Filename;
my $test_string = "/default.ida?######...";
my $analyzer = new Lire::WWW::Filename();$analyzer->setFilename($test_string);
print " Attack: " . $analyzer->getAttack() . "\n";
DESCRIPTION
This module offers an interface to databases with known information useful in analyzing filenames as found in Apache logfiles. One could use it to analyze attacks on known webserver vulnerabilities, consisting of specially crafted HTTP GET requests.
Optionally, the user can add custom information to the database with the addX() and addXHash() functions.
SEE ALSO
Lire::Extensions::WWW::AttackSchema(3)
VERSION
$Id: Filename.pm,v 1.4 2002/02/03 13:17:20 vanbaal Exp $
COPYRIGHT
Copyright (C) 2001 Stichting LogReport Foundation [email protected]
This file is part of Lire.
Lire is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html or write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
AUTHORS
Egon Willighagen <[email protected]>