LR_ANONYMIZE.IN(1) LogReport's Lire Documentation LR_ANONYMIZE.IN(1) (NAME) lr_anonymize - () (SYNOPSIS) lr_anonymize dumpfilestem (DESCRIPTION) lr_anonymize (responder) . << >> << >> Lire . lr_anonymize IP ( ) (stdin) <<>> (stdout) . (<<>> deanonymize) lr_deanonymize(1) Berkeley DB 'inaddr' 'maildomain' 'email' 'ip' 'domain' dumpfilestem . dumpfilestem /tmp/dump ../../var/dump dump . . . /tmp . TMPDIR . lr_deanonymize (CONNECTION WITH lr_deanonymize) : $ lr_anonymize dump < log > log.anon $ lr_deanonymize dump < log.anon > log.new log log.new ( diff -i ). (NOTES) . . sendmail . (real) (user) (systime) . . . lr_deanonymize(1) lr_deanonymize(1) joe.user@example.com joe.user@example.com example.com . . (BACKGROUND) rfc822 : SPACE = ; ( 40, 32.) CTL = ; ( 177, 127.) specials = "(" / ")" / "<" / ">" / "@" ; Must be in quoted- / "," / ";" / ":" / "\" / <"> ; string, to use / "." / "[" / "]" ; within a word. atom = 1* quoted-string = <"> *(qtext/quoted-pair) <">; Regular qtext or ; quoted chars. word = atom / quoted-string domain-ref = atom ; symbolic reference domain-literal = "[" *(dtext / quoted-pair) "]" sub-domain = domain-ref / domain-literal domain = sub-domain *("." sub-domain) local-part = word *("." word) ; uninterpreted ; case-preserved addr-spec = local-part "@" domain ; global address rfc 2181: The DNS itself places only one restriction on the particular labels that can be used to identify resource records. That one restriction relates to the length of the label and the full name. The length of any one label is limited to between 1 and 63 octets. A full domain name is limited to 255 octets (including the separators). rfc1123: However, a valid host name can never have the dotted-decimal form #.#.#.#, since at least the highest-level component label will be alphabetic. rfc819: ::= | "." ::= |
::= ::= | ::= | ::= | | "-" ::= any one of the 52 alphabetic characters A through Z in upper case and a through z in lower case ::= any one of the ten digits 0 through 9 (EXAMPLE) << >> : blaat fkrf 1.2.3.4.in-addr.arpa] pietje@bigcompany.com bla 1 2 3 lj;agas;gag blaat 1.2.3.4 fkrf 3.2.3.4.in-addr.arpa] bla 1 www.hotsex.com 2 3 lj;agas;gag jan@blaat.frut.com agagag blaat fkrf 4.2.3.4.in-addr.arpa] bla pietje@bigcompany.com www.hotsex.com 234.34.2.0 jan@blaat.frut.com 4.2.3.4.in-addr.arpa1 2 3 lj;agas;gag blaat fkrf tweede 3.2.3.4.in-addr.arpa] bla 1.2.3.4 1 blablabla.com 2 mdcc.cx 3 lj;agas;gag : blaat fkrf 1.0.0.10.in-addr.arpa] john.doe.1@example.com bla 1 2 3 lj;agas;gag blaat 10.0.0.1 fkrf 2.0.0.10.in-addr.arpa] bla 1 1.example.com 2 3 lj;agas;gag john.doe.2@example.com agagag blaat fkrf 3.0.0.10.in-addr.arpa] bla john.doe.1@example.com 1.example.com 10.0.0.2 john.doe.2@example.com 3.0.0.10.in-addr.arpa1 2 3 lj;agas;gag blaat fkrf tweede 2.0.0.10.in-addr.arpa] bla 10.0.0.1 1 2.example.com 2 3.example.com 3 lj;agas;gag (dumps) : ip 234.34.2.0 10.0.0.2 ip 1.2.3.4 10.0.0.1 inaddr 3.2.3.4.in-addr.arpa 2.0.0.10.in-addr.arpa inaddr 1.2.3.4.in-addr.arpa 1.0.0.10.in-addr.arpa inaddr 4.2.3.4.in-addr.arpa 3.0.0.10.in-addr.arpa domain mdcc.cx 3.example.com domain blablabla.com 2.example.com domain www.hotsex.com 1.example.com email jan@blaat.frut.com john.doe.2@example.com email pietje@bigcompany.com john.doe.1@example.com (BUGS) example.com john.doe. IP rfc 1918 10.0.0.0 - 10.255.255.255 ( 10/8) . ('quoted-string') . ('domain-literal') . 999.999.999.999 IP : 255 . IP 100.10.3 IP . . (SEE ALSO) lr_deanonymize(1) README.lire-client Lire. (VERSION) $Id: lr_anonymize.in,v 1.5 2006/07/23 13:16:32 vanbaal Exp $ (COPYRIGHT) (C) 2000-2001 Stichting LogReport Foundation LogReport@LogReport.org << >> (GNU General Public License) ( ) . . << >> . ( COPYING ) . (AUTHOR) Joost van Baal Lire 2.1.1 2025-09-28 LR_ANONYMIZE.IN(1)