cancel
Showing results for 
Search instead for 
Did you mean: 
mardes
Level 7

de-anonymize access.log entries

Hello!

we use anonymized access.log

access.log entries look like

[16/Sep/2011:08:28:31 +0200] "<anonymous1>W3hDzSlUsrcfsdRp4FkzjccLzO/xpk7iWmjGl3q1qUk=</anonymous>"  .....

How can we de-anonymize selected log file entries, means how can we get username in clear text?

Best regards,

Michael Ardes

0 Kudos
3 Replies
asabban
Level 17

Re: de-anonymize access.log entries

Hello,

you can decrypt/deanonymize a complete logfile only. In case you want to decrypt only several lines it may be required to put them into a separate log. This file needs to be located on the MWG box itself. On MWG you can find the decryption tool here:

/opt/mwg/bin/LogFileDecrypter

I think there is not (yet) a handy graphical tool available yet so at the moment you will need to manually deanonymize the data.

Let me know if this helps you.

Best,

Andre

0 Kudos
mardes
Level 7

Re: de-anonymize access.log entries

Hi Andre,

yes, that's what I was looking for.

Thank you very much.

Michael

0 Kudos
asabban
Level 17

Re: de-anonymize access.log entries

Thank you!

In case you were successful, do you mind marking the thread as answered?

Thank you!

Andre

0 Kudos