Provided by: ipv6calc_0.99.1-1_amd64 bug

NAME

       ipv6loganon - HTTP server log file anonymizer

SYNOPSIS

       cat /var/log/httpd/access_log | ipv6loganon [OPTIONS]

DESCRIPTION

       This program anonymizes IPv4/IPv6 addresses in HTTP server log files

       Takes data from stdin, proceed it to stdout

       Depending on the anonymization method, address parts (prefix/interface identifier) are

         simply zeroized by given masks

         anonymized by zeroizing only required bits (partially depending on given masks)
                  IID:
                    EUI-48/64: serial number would be zero'ed, keeping OID
                    ISATAP:    client IPv4 address would be anonymized by given IPv4 mask
                    TEREDO:    client IPv4 address would be anonymized by given IPv4 mask, client
              port would be zero'ed
                    6to4(Microsoft): client IPv4 address would be anonymized by given IPv4 mask
                    local: whole IID would be zero'ed (except if privacy extension was  detected,
              then replaced by a special token)
                  Prefix:
                    IPv6  addresses including IPv4 address of client would be anonymized by given
              IPv4 mask

         anonymized by try to keep for IPv4 and IPv6 addresses (keep-type-asn-cc)
                  type of address
                  Autonomous System Number (ASN)
                  Country Code (CC)

                  This method requires an IPv4/IPv6 to Country Code and ASN resolution,  provided
              by GeoIP

                  Big advantage: ipv6logstats(8) result should be the same as with raw data

                  Anonymized IPv4 addresses are from experimental range 240.0.0.0/8
                  Anonymized IPv6 addresses are using (currently hijacked) prefix a909::/16
                  Anonymized IPv6 IID is starting with a9x9 (x = anonymized nibbles of SLA)

OPTIONS

       General options:

       [-d|--debug  DEBUGVALUE]  :  debug  value (bitwise like) can also be set by IPV6CALC_DEBUG
       environment value

       [-v|--version [-v [-v]]]   : version information (2 optional detail levels)

       [-v|--version -h]          : explanation of feature tokens
              <TP [-V|--verbose]             : be more verbose

       [-h|--help|-?]             : this online help

       External database options (depending on compiled-in suppport):

       [--db-ip2location-disable      ] : IP2Location support disabled

       [--db-ip2location-dir   DIRECTORY]   :   IP2Location    database    directory    (default:
       /usr/share/IP2Location)

       [--db-geoip-disable            ] : GeoIP support disabled

       [--db-geoip-dir       DIRECTORY] : GeoIP database directory (default: /usr/share/GeoIP)

       Input/output options:

       [-w|--write]               : write output to file instead of stdout

       [-a|--append]              : append output to file instead of stdout

       [-f|--flush]               : flush output after each line

       [-V|--verbose]             : be verbose
              Performance options:

       [-n|--nocache]            : disable caching

       [-c|--cachelimit VALUE] : set cache limit
                                    default: 20
                                    maximum: 200

       Processing options:

       Shortcut for anonymization presets:

       --anonymize-standard (default)

       --anonymize-careful

       --anonymize-paranoid

       Supported methods [--anonymize-method METHOD]:

       anonymize : reliable anonymization, keep as much type information as possible

       zeroize   : simple zeroizing according to given masks, probably loose type information

       keep-type-asn-cc: special reliable anonymization, keep type & Autonomous System Number and
       CountryCode

       Available presets (shortcut names) [--anonymize-preset PRESET-NAME]:

       anonymize-standard    (as):   mask-ipv6=   56   mask-ipv4=24   mask-eui64=40   mask-mac=24
       mask-autoadjust=yes method=anonymize
              anonymize-careful     (ac):  mask-ipv6=  48  mask-ipv4=20 mask-eui64=24 mask-mac=24
              mask-autoadjust=yes method=anonymize
              anonymize-paranoid   (ap): mask-ipv6= 40  mask-ipv4=16  mask-eui64=  0  mask-mac=24
              mask-autoadjust=no  method=anonymize
              zeroize-standard      (zs):  mask-ipv6=  56  mask-ipv4=24 mask-eui64=40 mask-mac=24
              mask-autoadjust=yes method=zeroize
              zeroize-careful      (zc): mask-ipv6=  48  mask-ipv4=20  mask-eui64=24  mask-mac=24
              mask-autoadjust=yes method=zeroize
              zeroize-paranoid      (zp):  mask-ipv6=  40  mask-ipv4=16 mask-eui64= 0 mask-mac=24
              mask-autoadjust=no  method=zeroize
              keep-type-asn-cc     (kp): mask-ipv6=  56  mask-ipv4=24  mask-eui64=40  mask-mac=24
              mask-autoadjust=yes method=keep-type-asn-cc

       Custom control:

       --mask-ipv4  BITS     : mask IPv4 address [0-32] (even if occurs in IPv6 address)

       --mask-ipv6  BITS     : mask IPv6 prefix [0-64] (only applied to related address types)

       --mask-eui64 BITS     : mask EUI-64 address or IPv6 interface identifier [0-64]

       --mask-mac   BITS     : mask MAC address [0-48]

       --mask-autoadjust  yes|no:  autoadjust  mask to keep type/vendor information regardless of
       less given mask

EXAMPLES

       Original lines (stdin):

       207.46.98.53 - - [01/Jan/2007:00:01:15 +0100] "GET /Linux+IPv6-HOWTO/x1112.html  HTTP/1.0"
       200 6162 "-" "msnbot/1.0 (+http://search.msn.com/msnbot.htm)" 253 6334

       2002:52b6:6b01:1:216:17ff:fe01:2345  -  -  [10/Jan/2007:15:04:28  +0100] "GET /favicon.ico
       HTTP/1.1" 200 4710 "http://www.bieringer.de/linux/IPv6/" "Mozilla/5.0 (X11; U; Linux i686;
       en-US;  rv:1.8.0.9)  Gecko/20061219  Fedora/1.5.0.9-1.fc6  Firefox/1.5.0.9 pango-text" 413
       5005

       Modified lines (stdout):

       207.46.98.0 - - [01/Jan/2007:00:01:15 +0100] "GET  /Linux+IPv6-HOWTO/x1112.html  HTTP/1.0"
       200 6162 "-" "msnbot/1.0 (+http://search.msn.com/msnbot.htm)" 253 6334

       2002:52b6:6b00:0:216:17ff:fe00:0   -  -  [10/Jan/2007:15:04:28  +0100]  "GET  /favicon.ico
       HTTP/1.1" 200 4710 "http://www.bieringer.de/linux/IPv6/" "Mozilla/5.0 (X11; U; Linux i686;
       en-US;  rv:1.8.0.9)  Gecko/20061219  Fedora/1.5.0.9-1.fc6  Firefox/1.5.0.9 pango-text" 413
       5005

       Anonymization method: keep-type-asn-cc

       echo "1.2.3.4" | ./ipv6loganon --anonymize-preset keep-type-asn-cc
              246.24.59.65

       echo   "2001:a60:1400:1201:221:70ff:fe01:2345"    |    ./ipv6loganon    --anonymize-preset
       keep-type-asn-cc
              a909:16fa:9092:23ff:a909:4291:4022:1708

SEE ALSO

       ipv6calc(8), ipv6logstat(8)

REPORTING BUGS

       Report bugs to <ipv6calc@lists.deepspace6.net> or to the authors.
       Homepage: http://www.deepspace6.net/projects/ipv6calc.html

COPYRIGHT

       GPLv2

AUTHORS

       Peter Bieringer <pb@bieringer.de>