Apart from the normal format for IPv6, it is also possible to format an IPv6 with an embedded IPv4 instead of the last two blocks. This is described in the RFC 4291 section 2.2.3, for example:::FFFF:129.144.52.38 The format is used for systems working with both IPv6 and IPv4 addresses. However, in the RFC it is […]
SLFA release
As I mentioned in my recent post about the mmanon rewrite, I have been working on an offline anonymization tool. It is called SLFA (short for simple log file anonymizer) and I have now finished the first usable version. SLFA is a java application that allows you to anonymize files from the command line. Currently, […]
Mmanon rewrite finished for the time being
I have recently finished the rewrite of the mmanon module. Now I have also finished implementing support for IPv6. This includes the same parameters as IPv4, but the mode parameter is now called anonmode, to make a later implementation of different output format modes for ipv6 easier. This might be in the future, but it […]
IPv6 anonymization portability problems
IPv6-addresses are represented by 128 bits. This makes it possible to provide far more addresses than IPv4. However, this also causes problems when working with IPv6. In this case, I am currently working on an IPv6-anonymiation function for rsyslog. There are some systems that support an unsigned 128 bit integer when using GCC or clang […]
rewriting mmanon: an update
I have completed the rewrite of the IPv4-function of the mmanon module.I have managed to keep the original parameters available, although the “rewrite” option is now called “zero”. This is not going to be a problem causing older, already running, configurations to no longer work, as the old parameter-names still work. However, having the “ipv4.” […]
Rewriting mmanon
Currently, rsyslog’s mmanon module has the task of anonymizing ip-addresses. However, due to only being able to anonymize ipv4-addresses, I decided to overhaul the module to be able to also work with ipv6-addresses (see this feature request). In doing this, I also noticed some bugs with the ipv4-module. Now there are two options: try to […]
Improving rsyslog debug output
Currently, our debug output is focused on one group and one group only: developers. For them, debug output right now is a nice but sometimes hard to analyze tool. However, the debug output has a way bigger potential in a plethora of uses. We are currently working on refactoring the debug output. This has been […]