Provided by: ipv6calc_0.99.1-1_i386 bug

NAME

       ipv6loganon - HTTP server log file anonymizer

SYNOPSIS

       cat /var/log/httpd/access_log | ipv6loganon [OPTIONS]

DESCRIPTION

       This program anonymizes IPv4/IPv6 addresses in HTTP server log files

       Takes data from stdin, proceed it to stdout

       Depending  on the anonymization method, address parts (prefix/interface
       identifier) are

         simply zeroized by given masks

         anonymized by zeroizing only required bits  (partially  depending  on
       given masks)
                  IID:
                    EUI-48/64: serial number would be zero'ed, keeping OID
                    ISATAP:     client  IPv4  address  would  be anonymized by
              given IPv4 mask
                    TEREDO:    client IPv4  address  would  be  anonymized  by
              given IPv4 mask, client port would be zero'ed
                    6to4(Microsoft):  client  IPv4 address would be anonymized
              by given IPv4 mask
                    local: whole IID  would  be  zero'ed  (except  if  privacy
              extension was detected, then replaced by a special token)
                  Prefix:
                    IPv6  addresses  including IPv4 address of client would be
              anonymized by given IPv4 mask

         anonymized  by  try   to   keep   for   IPv4   and   IPv6   addresses
       (keep-type-asn-cc)
                  type of address
                  Autonomous System Number (ASN)
                  Country Code (CC)

                  This  method  requires  an IPv4/IPv6 to Country Code and ASN
              resolution, provided by GeoIP

                  Big advantage: ipv6logstats(8) result should be the same  as
              with raw data

                  Anonymized   IPv4  addresses  are  from  experimental  range
              240.0.0.0/8
                  Anonymized IPv6 addresses  are  using  (currently  hijacked)
              prefix a909::/16
                  Anonymized  IPv6  IID  is starting with a9x9 (x = anonymized
              nibbles of SLA)

OPTIONS

       General options:

       [-d|--debug DEBUGVALUE] : debug value (bitwise like) can also be set by
       IPV6CALC_DEBUG environment value

       [-v|--version  [-v  [-v]]]    :  version information (2 optional detail
       levels)

       [-v|--version -h]          : explanation of feature tokens
              <TP [-V|--verbose]             : be more verbose

       [-h|--help|-?]             : this online help

       External database options (depending on compiled-in suppport):

       [--db-ip2location-disable      ] : IP2Location support disabled

       [--db-ip2location-dir  DIRECTORY]  :  IP2Location  database   directory
       (default: /usr/share/IP2Location)

       [--db-geoip-disable            ] : GeoIP support disabled

       [--db-geoip-dir        DIRECTORY]  : GeoIP database directory (default:
       /usr/share/GeoIP)

       Input/output options:

       [-w|--write]               : write output to file instead of stdout

       [-a|--append]              : append output to file instead of stdout

       [-f|--flush]               : flush output after each line

       [-V|--verbose]             : be verbose
              Performance options:

       [-n|--nocache]            : disable caching

       [-c|--cachelimit VALUE] : set cache limit
                                    default: 20
                                    maximum: 200

       Processing options:

       Shortcut for anonymization presets:

       --anonymize-standard (default)

       --anonymize-careful

       --anonymize-paranoid

       Supported methods [--anonymize-method METHOD]:

       anonymize : reliable anonymization, keep as much  type  information  as
       possible

       zeroize    :  simple zeroizing according to given masks, probably loose
       type information

       keep-type-asn-cc:  special  reliable   anonymization,   keep   type   &
       Autonomous System Number and CountryCode

       Available presets (shortcut names) [--anonymize-preset PRESET-NAME]:

       anonymize-standard    (as):  mask-ipv6=  56  mask-ipv4=24 mask-eui64=40
       mask-mac=24 mask-autoadjust=yes method=anonymize
              anonymize-careful      (ac):    mask-ipv6=    48    mask-ipv4=20
              mask-eui64=24 mask-mac=24 mask-autoadjust=yes method=anonymize
              anonymize-paranoid      (ap):    mask-ipv6=    40   mask-ipv4=16
              mask-eui64= 0 mask-mac=24 mask-autoadjust=no  method=anonymize
              zeroize-standard       (zs):    mask-ipv6=    56    mask-ipv4=24
              mask-eui64=40 mask-mac=24 mask-autoadjust=yes method=zeroize
              zeroize-careful         (zc):    mask-ipv6=    48   mask-ipv4=20
              mask-eui64=24 mask-mac=24 mask-autoadjust=yes method=zeroize
              zeroize-paranoid       (zp):    mask-ipv6=    40    mask-ipv4=16
              mask-eui64= 0 mask-mac=24 mask-autoadjust=no  method=zeroize
              keep-type-asn-cc        (kp):    mask-ipv6=    56   mask-ipv4=24
              mask-eui64=40          mask-mac=24           mask-autoadjust=yes
              method=keep-type-asn-cc

       Custom control:

       --mask-ipv4   BITS      :  mask  IPv4 address [0-32] (even if occurs in
       IPv6 address)

       --mask-ipv6  BITS     :  mask  IPv6  prefix  [0-64]  (only  applied  to
       related address types)

       --mask-eui64   BITS       :  mask  EUI-64  address  or  IPv6  interface
       identifier [0-64]

       --mask-mac   BITS     : mask MAC address [0-48]

       --mask-autoadjust  yes|no:  autoadjust   mask   to   keep   type/vendor
       information regardless of less given mask

EXAMPLES

       Original lines (stdin):

       207.46.98.53      -     -     [01/Jan/2007:00:01:15     +0100]     "GET
       /Linux+IPv6-HOWTO/x1112.html  HTTP/1.0"  200   6162   "-"   "msnbot/1.0
       (+http://search.msn.com/msnbot.htm)" 253 6334

       2002:52b6:6b01:1:216:17ff:fe01:2345  -  -  [10/Jan/2007:15:04:28 +0100]
       "GET         /favicon.ico          HTTP/1.1"          200          4710
       "http://www.bieringer.de/linux/IPv6/" "Mozilla/5.0 (X11; U; Linux i686;
       en-US; rv:1.8.0.9) Gecko/20061219 Fedora/1.5.0.9-1.fc6  Firefox/1.5.0.9
       pango-text" 413 5005

       Modified lines (stdout):

       207.46.98.0      -      -     [01/Jan/2007:00:01:15     +0100]     "GET
       /Linux+IPv6-HOWTO/x1112.html  HTTP/1.0"  200   6162   "-"   "msnbot/1.0
       (+http://search.msn.com/msnbot.htm)" 253 6334

       2002:52b6:6b00:0:216:17ff:fe00:0  - - [10/Jan/2007:15:04:28 +0100] "GET
       /favicon.ico HTTP/1.1" 200  4710  "http://www.bieringer.de/linux/IPv6/"
       "Mozilla/5.0  (X11;  U;  Linux  i686; en-US; rv:1.8.0.9) Gecko/20061219
       Fedora/1.5.0.9-1.fc6 Firefox/1.5.0.9 pango-text" 413 5005

       Anonymization method: keep-type-asn-cc

       echo "1.2.3.4" | ./ipv6loganon --anonymize-preset keep-type-asn-cc
              246.24.59.65

       echo    "2001:a60:1400:1201:221:70ff:fe01:2345"     |     ./ipv6loganon
       --anonymize-preset keep-type-asn-cc
              a909:16fa:9092:23ff:a909:4291:4022:1708

SEE ALSO

       ipv6calc(8), ipv6logstat(8)

REPORTING BUGS

       Report bugs to <ipv6calc@lists.deepspace6.net> or to the authors.
       Homepage: http://www.deepspace6.net/projects/ipv6calc.html

COPYRIGHT

       GPLv2

AUTHORS

       Peter Bieringer <pb@bieringer.de>