DragonFly On-Line Manual Pages

Search: Section:  


ipv6loganon(8)                                                  ipv6loganon(8)

NAME

ipv6loganon - HTTP server log file anonymizer

SYNOPSIS

ipv6loganon [ -d value ] [ -V ] [ -n ] [ -w file ] [ -a file ] [ -c value ] [ --mask-ipv4 bits ] [ --mask-ipv6 bits ] [ --no-mask-iid ] [ --anonymize-standard | --anonymize-careful | --anonymize-paranoid ]

DESCRIPTION

ipv6loganon is a HTTP server log file anonymizer It expects a log line on stdin with an IPv4/IPv6 address as first token. This token would be anonymized according to given/default options. The anonymizer would keep as much information as possible for IPv6 address types. Client-side IID would be anonymized by o EUI-48 based: serial number would be zero'ed, keeping OID o EUI-64 based: serial number would be zero'ed, keeping OID o ISATAP: client IPv4 address would be anonymized by given IPv4 mask o TEREDO: client IPv4 address would be anonymized by given IPv4 mask, client port would be zero'ed o 6to4(Microsoft): client IPv4 address would be anonymized by given IPv4 mask o local: whole IID would be zero'ed (except if privacy extension was detected, then replaced by a special token) Client-side SLA would be anonymized by o SLA would be zero'ed Prefix would be anonymized by o 6to4: client IPv4 address would be anonymized by given IPv4 mask Compat/Mapped IPv4 addresses would be anonymized by o IPv4 address would be anonymized by given IPv4 mask Afterwards, the modified address and the trailing line would be printed to stdout or given file.

OPTIONS

GENERAL -d, --debug <debug value> debug value (bitwise like) -V, --verbose be verbose -w, --write <file> write output to file instead of stdout -a, --append <file> append output to file instead of stdout -f, --flush flush output after each line -n, --nocache disable caching -c, --cachelimit set cache limit (default: 20, maximum: 200) OUTPUT ANONYMIZATION --mask-ipv4 <bits> mask all IPv4 addresses [0-32], default 24 (applied also to IPv4 addresses inside IPv6 address) --mask-ipv6 <bits> mask IPv6 prefix [0-63], default 48 (only applied to related address types) --no-mask-iid do not mask non-IPv4 based IPv6-IID --anonymize-standard (default) preset for standard anonymization mask-ipv4=24 mask-ipv6=48 mask-iid --anonymize-careful preset for careful anonymization mask-ipv4=20 mask-ipv6=40 mask-iid --anonymize-paranoid preset for paranoid anonymization mask-ipv4=16 mask-ipv6=32 mask-iid

EXAMPLE

OUTPUT Original lines (stdin): 207.46.98.53 - - [01/Jan/2007:00:01:15 +0100] "GET /Linux+IPv6-HOWTO/x1112.html HTTP/1.0" 200 6162 "-" "msnbot/1.0 (+http://search.msn.com/msnbot.htm)" 253 6334 2002:52b6:6b01:1:216:17ff:fe01:2345 - - [10/Jan/2007:15:04:28 +0100] "GET /favicon.ico HTTP/1.1" 200 4710 "http://www.bieringer.de/linux/IPv6/" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.9) Gecko/20061219 Fedora/1.5.0.9-1.fc6 Firefox/1.5.0.9 pango-text" 413 5005 Modified lines (stdout): 207.46.98.0 - - [01/Jan/2007:00:01:15 +0100] "GET /Linux+IPv6-HOWTO/x1112.html HTTP/1.0" 200 6162 "-" "msnbot/1.0 (+http://search.msn.com/msnbot.htm)" 253 6334 2002:52b6:6b00:0:216:17ff:fe00:0 - - [10/Jan/2007:15:04:28 +0100] "GET /favicon.ico HTTP/1.1" 200 4710 "http://www.bieringer.de/linux/IPv6/" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.9) Gecko/20061219 Fedora/1.5.0.9-1.fc6 Firefox/1.5.0.9 pango-text" 413 5005 OUTPUT TODO

AUTHORS

Peter Bieringer <pb@bieringer.de>

SEE ALSO

ipv6calc(8) Peter Bieringer <pb@bieringer.de>, Niko Tyni <ntyni@iki.fi> 2012-05-09 ipv6loganon(8)

Search: Section: