Skip to content
/ u2_anon Public

Process unified2 file and allow anonymization of different level of information (will create new file), simplifies the sharing of events.

License

Notifications You must be signed in to change notification settings

binf/u2_anon

Repository files navigation

-------------------------------------------
| Eric Lauzon <[email protected]> (c) 2012 |
-------------------------------------------

-----------
|IMPORTANT|
-----------

1- You will need to have lib dnet installed to compile this tool [http://libdnet.sourceforge.net/] 
   (but if you have a rescent version of snort installed on your system, you probably already 
   have libdnet installed.)

2- If you are skilled and can make a small anonymous pig ascii art ...please submit :)

-----------
|IMPORTANT|
-----------

------
|INFO|
------

u2_anon will not overwrite your original unified2 file, it can work and be invoked
on each file or work in batch mode on a directory.

Make sure before submitting any unified2 file you have "anonymized", to use u2spewfoo
or other tools to verify the information you wanted to protect is gone.

------
|INFO|
------

------------------------------
|Anonimity Level Description |
------------------------------

 [-eE:] [Anonymize Event]
     - Will set source and destination IP's of EVENT to ipv4 - "127.0.0.1" , ipv6 "::ffff:127.0.0.1"

 [-lL:] [Anonimize LinkLayer (ethernet)]
     - Will set source mac to AA:AA:AA:AA:AA:AA and dst mac to BB:BB:BB:BB:BB:BB

 [-pP:] [Anonymize Packet data]
     - Will Zero out packet payload

 [-xX:] [Anonymize Extra DATA event]
     - Will set IP information to "loopback" and extra data "data" will be zeroed.

------------------------------
|Anonimity Level Description |
------------------------------

--------------------
| Building process |
--------------------

./autogen.sh
./configure
./make

--------------------
| Building process |
--------------------

About

Process unified2 file and allow anonymization of different level of information (will create new file), simplifies the sharing of events.

Resources

License

Stars

Watchers

Forks

Packages

No packages published