lr_deanonimize1
Restore anonimized data, using a dump as produced by lr_anonimize(1)
Usage
lr_deanonimize dumpfilestem
Overview
lr_deanonimize reads a file containing anonimized emailaddresses, ipnumbers, and hostnames (typically a report, generated from a logfile from an internet service) from stdin, and prints a "deanonimized" version of this file to stdout. It reads its information to do this from a bunch of Berkeley DB's, stored in files whose's names are derived from dumpfilestem, as produced by lr_anonimize(1).
Examples
A 'logfile' like e.g.
blaat fkrf 1.2.3.4.in-addr.arpa] [email protected] bla 1 2 3 lj;agas;gagblaat 1.2.3.4 fkrf 3.2.3.4.in-addr.arpa] bla 1 www.hotsex.com 2 3 lj;agas;gag[email protected] agagagblaat fkrf 4.2.3.4.in-addr.arpa] bla [email protected] www.hotsex.com234.34.2.0 [email protected] 4.2.3.4.in-addr.arpa1 2 3 lj;agas;gagblaat fkrf tweede 3.2.3.4.in-addr.arpa] bla 1.2.3.4 1 blablabla.com2 mdcc.cx3 lj;agas;gag
wil get anonimized to
blaat fkrf 1.0.0.10.in-addr.arpa] [email protected] bla 1 2 3 lj;agas;gagblaat 10.0.0.1 fkrf 2.0.0.10.in-addr.arpa] bla 1 1.example.com 2 3 lj;agas;gag[email protected] agagagblaat fkrf 3.0.0.10.in-addr.arpa] bla [email protected] 1.example.com10.0.0.2 [email protected] 3.0.0.10.in-addr.arpa1 2 3 lj;agas;gagblaat fkrf tweede 2.0.0.10.in-addr.arpa] bla 10.0.0.1 1 2.example.com2 3.example.com3 lj;agas;gag
The dump will look like
ip 234.34.2.0 10.0.0.2ip 1.2.3.4 10.0.0.1inaddr 3.2.3.4.in-addr.arpa 2.0.0.10.in-addr.arpainaddr 1.2.3.4.in-addr.arpa 1.0.0.10.in-addr.arpainaddr 4.2.3.4.in-addr.arpa 3.0.0.10.in-addr.arpadomain mdcc.cx 3.example.comdomain blablabla.com 2.example.comdomain www.hotsex.com 1.example.comemail [email protected] [email protected]email [email protected] [email protected]
Version
$Id: lr_deanonimize.in,v 1.7 2001/08/23 21:40:35 flacoste Exp $