===========================================================
.___ __ __
_________________ __ __ __| _/|__|/ |_
/ ___\_` __ \__ \ | | \/ __ | | \\_ __\
/ /_/ > | \// __ \| | / /_/ | | || |
\___ /|__| (____ /____/\____ | |__||__|
/_____/ \/ \/
grep rough audit - static analysis tool
v2.8 written by @Wireghoul
=================================[justanotherhacker.com]===
logwatch-7.5.4/install_logwatch.sh-92-
logwatch-7.5.4/install_logwatch.sh:93: ac_optarg=`expr "x$ac_option" : 'x[^=]*=\(.*\)'`
logwatch-7.5.4/install_logwatch.sh-94-
##############################################
logwatch-7.5.4/install_logwatch.sh-213-for i in scripts/logfiles/* ; do
logwatch-7.5.4/install_logwatch.sh:214: if [ `ls $i | grep -v CVS | wc -l` -ne 0 ] ; then
logwatch-7.5.4/install_logwatch.sh-215- install -m 0755 -d $BASEDIR/$i
##############################################
logwatch-7.5.4/install_logwatch.sh-267-#Search for makewhatis
logwatch-7.5.4/install_logwatch.sh:268:for f in `echo $PATH | tr : ' '`; do
logwatch-7.5.4/install_logwatch.sh-269- if [ -x "$f/makewhatis" ]; then
##############################################
logwatch-7.5.4/lib/Logwatch.pm-327- $PackedAddr = pack('C4', split /\./,$Addr);
logwatch-7.5.4/lib/Logwatch.pm:328: $name = gethostbyaddr($PackedAddr,AF_INET());
logwatch-7.5.4/lib/Logwatch.pm-329- } elsif ($Addr =~ /^[0-9a-zA-Z:]*/) {
logwatch-7.5.4/lib/Logwatch.pm-330- $PackedAddr = pack('n8', canonical_ipv6_address($Addr));
logwatch-7.5.4/lib/Logwatch.pm:331: $name = gethostbyaddr($PackedAddr, AF_INET6());
logwatch-7.5.4/lib/Logwatch.pm-332- }
logwatch-7.5.4/lib/Logwatch.pm-333- if ($name) {
logwatch-7.5.4/lib/Logwatch.pm:334: my $val = "$Addr ($name)";
logwatch-7.5.4/lib/Logwatch.pm-335- $LookupCache{$Addr} = $val;
##############################################
logwatch-7.5.4/scripts/logwatch.pl-788- my $arguments = "'${Archive}' >> $DestFile";
logwatch-7.5.4/scripts/logwatch.pl:789: system("$Config{'pathtozcat'} $arguments") == 0
logwatch-7.5.4/scripts/logwatch.pl-790- or die "system '$Config{'pathtozcat'} $arguments' failed: $?"
##############################################
logwatch-7.5.4/scripts/logwatch.pl-792- my $arguments = "'${Archive}' 2>/dev/null >> $DestFile";
logwatch-7.5.4/scripts/logwatch.pl:793: system("$Config{'pathtobzcat'} $arguments") == 0
logwatch-7.5.4/scripts/logwatch.pl-794- or die "system '$Config{'pathtobzcat'} $arguments' failed: $?"
##############################################
logwatch-7.5.4/scripts/logwatch.pl-796- my $arguments = "'${Archive}' 2>/dev/null >> $DestFile";
logwatch-7.5.4/scripts/logwatch.pl:797: system("$Config{'pathtoxzcat'} $arguments") == 0
logwatch-7.5.4/scripts/logwatch.pl-798- or die "system '$Config{'pathtoxzcat'} $arguments' failed: $?"
##############################################
logwatch-7.5.4/scripts/logwatch.pl-800- my $arguments = "'${Archive}' >> $DestFile";
logwatch-7.5.4/scripts/logwatch.pl:801: system("$Config{'pathtocat'} $arguments") == 0
logwatch-7.5.4/scripts/logwatch.pl-802- or die "system '$Config{'pathtocat'} $arguments' failed: $?"
##############################################
logwatch-7.5.4/scripts/logwatch.pl-901- #System call does the log processing
logwatch-7.5.4/scripts/logwatch.pl:902: system("$Config{'pathtocat'} $Command") == 0
logwatch-7.5.4/scripts/logwatch.pl-903- or die "system '$Config{'pathtocat'} $Command' failed: $?"
##############################################
logwatch-7.5.4/scripts/logwatch.pl-922- if ((!(-d $eeefile)) && (!($eeefile =~ m/-archive/))) {
logwatch-7.5.4/scripts/logwatch.pl:923: system("$Config{'pathtocat'} $eeefile $ecpcmd") == 0
logwatch-7.5.4/scripts/logwatch.pl-924- or die "system '$Config{'pathtocat'} $eeefile $ecpcmd' failed: $?"
##############################################
logwatch-7.5.4/scripts/services/sendmail-540- my @CleanList = split(/,/, $CleanTo);
logwatch-7.5.4/scripts/services/sendmail:541: for my $ListAddr (@CleanList) {
logwatch-7.5.4/scripts/services/sendmail-542- $ToList{$ListAddr}++;
##############################################
logwatch-7.5.4/scripts/services/sendmail-1267- print "\n\nTop $ToListThreshold Email Recipients\n";
logwatch-7.5.4/scripts/services/sendmail:1268: foreach my $ToAddr (sort {$ToList{$b}<=>$ToList{$a}} keys %ToList) {
logwatch-7.5.4/scripts/services/sendmail-1269- if ($ToListCount >= $ToListThreshold) { last; };
##############################################
logwatch-7.5.4/scripts/services/dovecot-100- if (defined $iaddr) {
logwatch-7.5.4/scripts/services/dovecot:101: my $host = gethostbyaddr($iaddr, AF_INET);
logwatch-7.5.4/scripts/services/dovecot-102- if (defined $host) {
##############################################
logwatch-7.5.4/scripts/services/pound-47- if ($DoLookup) {
logwatch-7.5.4/scripts/services/pound:48: if ($name = gethostbyaddr ($PackedAddr,2)) {
logwatch-7.5.4/scripts/services/pound-49- return ($name . " (" . $Addr . ")");
##############################################
logwatch-7.5.4/scripts/services/zz-disk_space-60- if ($OSname eq "Linux") {
logwatch-7.5.4/scripts/services/zz-disk_space:61: system("du -s --block-size=1048576 -h $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-62- } elsif ($OSname eq "Darwin") {
logwatch-7.5.4/scripts/services/zz-disk_space:63: system("du -s --block-size=1048576 -h $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-64- } elsif ($OSname eq "SunOS") {
logwatch-7.5.4/scripts/services/zz-disk_space-65- if ( ($release eq "5.10") || ($release eq "5.9") || ($release eq "5.11") ) {
logwatch-7.5.4/scripts/services/zz-disk_space:66: system("/usr/xpg4/bin/du -s -h $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-67- } else {
logwatch-7.5.4/scripts/services/zz-disk_space:68: system("du -s $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-69- }
logwatch-7.5.4/scripts/services/zz-disk_space-70- } elsif ($OSname eq "HP-UX") {
logwatch-7.5.4/scripts/services/zz-disk_space:71: system("du -s -k $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-72- } elsif ($OSname eq "AIX") {
logwatch-7.5.4/scripts/services/zz-disk_space:73: system("du -s -k $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-74- } else {
logwatch-7.5.4/scripts/services/zz-disk_space:75: system("du -s -h $Dir | sort -n -r -k 1");
logwatch-7.5.4/scripts/services/zz-disk_space-76- }
##############################################
logwatch-7.5.4/scripts/services/zz-disk_space-134-{
logwatch-7.5.4/scripts/services/zz-disk_space:135: system($disk_cmd);
logwatch-7.5.4/scripts/services/zz-disk_space-136- print "\n";
##############################################
logwatch-7.5.4/scripts/services/zz-disk_space-139-sub DiskFull {
logwatch-7.5.4/scripts/services/zz-disk_space:140: my @rows = split('\n', `$disk_cmd`);
logwatch-7.5.4/scripts/services/zz-disk_space-141- # Remove header
##############################################
logwatch-7.5.4/scripts/services/named-661- print "\nConnection refused resolving:\n";
logwatch-7.5.4/scripts/services/named:662: foreach $Addr (sort keys %ConnectionRefused) {
logwatch-7.5.4/scripts/services/named-663- print " $Addr:\n";
##############################################
logwatch-7.5.4/scripts/services/named-671- print "\nThese addresses had lame server references:\n";
logwatch-7.5.4/scripts/services/named:672: foreach $Addr (sort keys %LameServer) {
logwatch-7.5.4/scripts/services/named-673- print " $Addr:\n";
##############################################
logwatch-7.5.4/scripts/services/zz-network-74- if (($OSname eq "Linux") && ( -f $pathto_chkconfig)) {
logwatch-7.5.4/scripts/services/zz-network:75: system("$pathto_chkconfig --list $service");
logwatch-7.5.4/scripts/services/zz-network-76- } else {
##############################################
logwatch-7.5.4/scripts/services/zz-network-95- print "\n";
logwatch-7.5.4/scripts/services/zz-network:96: system("$pathto_vtysh -e 'sh ver'");
logwatch-7.5.4/scripts/services/zz-network-97- }
##############################################
logwatch-7.5.4/scripts/services/zz-network-264- print "\n";
logwatch-7.5.4/scripts/services/zz-network:265: system("netstat -i | grep -v Kernel | awk '$awkprog' ");
logwatch-7.5.4/scripts/services/zz-network-266- }
##############################################
logwatch-7.5.4/scripts/services/citadel-1270-# printf " %-50s: %5i\n", $cmd, scalar keys %{$SMTPclientCMDS{$cmd}};
logwatch-7.5.4/scripts/services/citadel:1271:# foreach my $addr (sort {$a cmp $b} keys %{$SMTPclientCMDS{$cmd}}) {
logwatch-7.5.4/scripts/services/citadel-1272-# if ($addr != "") { printf "\t%-48s: %5i\n"; $addr, $SMTPclientCMDS{$cmd}{$addr}; }
##############################################
logwatch-7.5.4/scripts/services/courier-74- if ($DoLookup) {
logwatch-7.5.4/scripts/services/courier:75: if ($name = gethostbyaddr ($PackedAddr,2)) {
logwatch-7.5.4/scripts/services/courier-76- return ($name . " (" . $Addr . ")");
##############################################
logwatch-7.5.4/scripts/services/courier-598- if (-x $MailqPath) {
logwatch-7.5.4/scripts/services/courier:599: print `$MailqPath`;
logwatch-7.5.4/scripts/services/courier-600- print "\n\n";
##############################################
logwatch-7.5.4/scripts/services/postfix-4357- #postfix/dnsblog[78598]: addr 192.168.0.1 blocked by domain zen.spamhaus.org as 127.0.0.11
logwatch-7.5.4/scripts/services/postfix:4358: if ($line =~ /^addr (\S+) (?:listed|blocked) by domain (\S+) as (\S+)$/) {
logwatch-7.5.4/scripts/services/postfix-4359- $Counts{'dnsblog'}{$2}{$1}{$3}++ if $Collecting{'dnsblog'};
##############################################
logwatch-7.5.4/scripts/services/samba-217- #lib/util_sock.c:read_data(436) read_data: read failure for 4. Error = Brak drogi do systemu
logwatch-7.5.4/scripts/services/samba:218: #lib/util_sock.c:get_peer_addr(1229) getpeername failed. Error was Drugi koniec nie jest po³±czony
logwatch-7.5.4/scripts/services/samba-219- #lib/util_sock.c:open_socket_out(911) error connecting to 192.168.0.101:445 (Po³±czenie odrzucone)
##############################################
logwatch-7.5.4/scripts/services/rt314-110-foreach my $ip (@keys) {
logwatch-7.5.4/scripts/services/rt314:111: print "$ip\t" . $ipaddrs{$ip} . "\t" . gethostbyaddr(inet_aton($ip), AF_INET) . "\n";
logwatch-7.5.4/scripts/services/rt314-112- $total += $ipaddrs{$ip};
##############################################
logwatch-7.5.4/scripts/services/amavis-3680- foreach my $key (@tkeys) {
logwatch-7.5.4/scripts/services/amavis:3681: foreach my $timeval (@{$$timingsref{$key}}) {
logwatch-7.5.4/scripts/services/amavis-3682- $perkey_totals{$key} += $timeval;
##############################################
logwatch-7.5.4/debian/rules-41- # Move dist.conf files to default.conf in case they are missing there
logwatch-7.5.4/debian/rules:42: for i in `find $(SHAREDIR)/dist.conf/ -type f`; do \
logwatch-7.5.4/debian/rules-43- if [ ! -f $(SHAREDIR)/default.conf/$${i##$(SHAREDIR)/dist.conf/} ]; then \
##############################################
logwatch-7.5.4/debian/rules-56-# Add #!/usr/bin/perl at the top of the scripts (mainly for debugging and avoiding lintian warnings)
logwatch-7.5.4/debian/rules:57: for i in `find $(SHAREDIR)/scripts -type f `; do head -n1 $$i | grep -q '^#!/usr/bin/perl$$' || sed -e '1i #!/usr/bin/perl' -e '/#!\/usr\/bin\/perl -T/d' --in-place $$i;done
logwatch-7.5.4/debian/rules-58-