1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
ANTEATER README
===========================================================================
$Id: README,v 1.3 2003/10/23 15:33:02 drzoom Exp $
Install:
---------------------------------------------------------------------------
Follow the instructions in the "INSTALL" File to compile and install this
Tool. It's very easy:
Type:
./configure --prefix=/usr/local
make
and as root:
make install
Documentation:
---------------------------------------------------------------------------
You will find a german html-documentation in "anteater/docs/de" in this
distribution.
For a list of new features and changes, check first the "ChangeLog"
file in the distribution. And please read the "TODO" File too.
Run:
---------------------------------------------------------------------------
To get your first analyse you need the syslog with the sendmail entrys, and
the "aliases" file from the mailserver. Virtursetable and other important
configuration-files are not implemented but have a look to the source code:
it's very simple to add new features to this tool.
In this example, the sendmail logfile is in "/home/myself/maillog" and the
aliases file is in "/home/myself/aliases". Type this:
anteater --filter-sendmail --domain=yourdomain.xxx
--aliases-file=/home/myself/aliases
--analyse-all --limit=50 --filter-file=/home/myself/maillog
--report-html --report-html-file=anteater_report.html
An example with a postfix logfile:
anteater --filter-postfix --domain=yourdomain.xxx
--analyse-all --limit=50 --filter-file=/home/myself/maillog
> ascii_report.txt
And you get all current implemented analyses in html. If you search for
a special parameter or more features, you can use the debug Parameter...
anteater -mhtml > allparameters.html
...to get a (big) list over all modules, parameters etc. in the current
Version of anteater. Or use...
anteater -m | less
...t get the same on the console.
Have Fun!
Tobias
Known "bugs" ...
---------------------------------------------------------------------------
Old Compilers:
Use the configure option --enable-sprintf to use sprintf instead of
"stringstreams".
Contact:
---------------------------------------------------------------------------
see http://www.sourceforge.net/projects/anteater/
|
