Open avinashx11 opened 7 years ago
Hi,
Are we missing anything? Please help on this.
Hi,
I see that you are not giving an ELF file, could you please try it on ELF file, if you are getting error for elf file could you please paste the error and also could you please let me know if you have followed all the steps mentioned in the below link, if not have you done anything different?
https://cysinfo.com/setting-up-limon-sandbox-for-analyzing-linux-malwares/
Thanks, Monnappa
On Nov 6, 2017 11:42, "avinashx11" notifications@github.com wrote:
Hi,
It is a Amazing project. when we deployed the Limon we facing some issue in analyzing the file. Are we missing some files. Please help us.
Filetype: Debian binary package (format 2.0) File Size: 294.05 KB (301108 bytes) md5sum: 90fb6fdf8e3e9014c9ca136dc590e0c4 ssdeep: 6144:KPtJQlgLirXcDwMuzWP9mowX2Hz5m96+tanGaEnCOLdY2+ho/ boueFNQP1P1r:MslgurMEHzy9mf2Y4LG5JF+hoDoueod1 readelf: Error: Not an ELF file - it has the wrong magic bytes at the start readelf: Error: Not an ELF file - it has the wrong magic bytes at the start readelf: Error: Not an ELF file - it has the wrong magic bytes at the start Traceback (most recent call last): File "limon.py", line 190, in elf_header = static.elf_header() File "/home/samuser/Downloads/Limon-master/statan.py", line 123, in elf_header output = subprocess.check_output(["readelf","-h",self.file]) File "/usr/lib/python2.7/subprocess.py", line 573, in check_output raise CalledProcessError(retcode, cmd, output=output) subprocess.CalledProcessError: Command '['readelf', '-h', '/root/Linux_malwares/inetsim_1.2.7-1_all.deb']' returned non-zero exit status 1
NOTE: While submitting the elf file also we facing the same issue.
Kindly help on this .
Thanks & Regards, Avi.
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/monnappa22/Limon/issues/11, or mute the thread https://github.com/notifications/unsubscribe-auth/AED5rdfpwgZPcwYeHeT8RdDUizsm03zoks5szqNogaJpZM4QSxsg .
Hi Monnappa,
Thanks for your kind reply.
we followed the document and submitted the file. We are facing the following error.
cleaning inetsim log directory
cleaning inetsim report directory
starting inetsim
Traceback (most recent call last):
File "limon.py", line 345, in
Kindly support in fixing the issue.
Regards,
Avinash V.
Hi ,
Are we missing anything? Please help on this.
Regards, Avinash
Please let me know the path your InetSim binary and could you please confirm if you have specified the same path in the configuration file, it looks like Limon is not able to invoke Inetsim...are you able to invoke InteSim manually?
On Mon, Nov 20, 2017 at 1:16 PM, avinashx11 notifications@github.com wrote:
Hi ,
Are we missing anything? Please help on this.
Regards, Avinash
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/monnappa22/Limon/issues/11#issuecomment-345615547, or mute the thread https://github.com/notifications/unsubscribe-auth/AED5rfbd2x-P_fz3IeuqAmv1DH3OTKDsks5s4S46gaJpZM4QSxsg .
Hi,
Thanks a lot. We reinstalled the inet sim and able to start it but still we getting an error. cleaning inetsim log directory cleaning inetsim report directory starting inetsim Waiting for all the services to start INetSim 1.2.7 (2017-10-22) by Matthias Eckert & Thomas Hungenberg PIDfile '/var/run/inetsim.pid' exists - INetSim already running? transferring file to virtual machine Error: A file was not found
Exiting the program root@limon:/home/limonuser/Downloads/Limon-master# as not found Assembler messages: Error: can't open not for reading: No such file or directory not: Error: can't open found for reading: No such file or directory
Can you please help on this?
Regards, Avinash
Hi ,
Are we missing anything? Please help on this.
Regards, Avinash
Could you please send the output of the tool to my email id, I would like to know at what point you are getting that error. Also please make sure the variables in the configuration file is updated properly...I'm thinking that you still haven't updated the variables in the configuration file with the appropriate paths and also I suggest you read this link carefully before proceeding with configuring Limon
https://cysinfo.com/setting-up-limon-sandbox-for-analyzing-linux-malwares/
Thanks, Monnappa
On Thu, Nov 23, 2017 at 11:01 AM, avinashx11 notifications@github.com wrote:
Hi,
Thanks a lot. We reinstalled the inet sim and able to start it but still we getting an error. cleaning inetsim log directory cleaning inetsim report directory starting inetsim Waiting for all the services to start INetSim 1.2.7 (2017-10-22) by Matthias Eckert & Thomas Hungenberg PIDfile '/var/run/inetsim.pid' exists - INetSim already running? transferring file to virtual machine Error: A file was not found
Exiting the program root@limon:/home/limonuser/Downloads/Limon-master# as not found Assembler messages: Error: can't open not for reading: No such file or directory not: Error: can't open found for reading: No such file or directory
Can you please help on this?
Regards, Avinash
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/monnappa22/Limon/issues/11#issuecomment-346534726, or mute the thread https://github.com/notifications/unsubscribe-auth/AED5rQlM70_eP3lVoXJ53w7Qbq9yQGUFks5s5QMegaJpZM4QSxsg .
Hi,
Thanks a lot for the update. I forward the output file now. One more time we check with the configuration files.
Thanks , Avinash
Hi ,
Thanks a lot for your help.
We have attached the output file. Kindly have a look on this and help us in this part.
Thanks & Regards, Avinash.V
On Fri, Nov 24, 2017 at 4:57 PM, monnappa22 notifications@github.com wrote:
Could you please send the output of the tool to my email id, I would like to know at what point you are getting that error. Also please make sure the variables in the configuration file is updated properly...I'm thinking that you still haven't updated the variables in the configuration file with the appropriate paths and also I suggest you read this link carefully before proceeding with configuring Limon
https://cysinfo.com/setting-up-limon-sandbox-for-analyzing-linux-malwares/
Thanks, Monnappa
On Thu, Nov 23, 2017 at 11:01 AM, avinashx11 notifications@github.com wrote:
Hi,
Thanks a lot. We reinstalled the inet sim and able to start it but still we getting an error. cleaning inetsim log directory cleaning inetsim report directory starting inetsim Waiting for all the services to start INetSim 1.2.7 (2017-10-22) by Matthias Eckert & Thomas Hungenberg PIDfile '/var/run/inetsim.pid' exists - INetSim already running? transferring file to virtual machine Error: A file was not found
Exiting the program root@limon:/home/limonuser/Downloads/Limon-master# as not found Assembler messages: Error: can't open not for reading: No such file or directory not: Error: can't open found for reading: No such file or directory
Can you please help on this?
Regards, Avinash
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/monnappa22/Limon/issues/11#issuecomment-346534726, or mute the thread https://github.com/notifications/unsubscribe-auth/AED5rQlM70_ eP3lVoXJ53w7Qbq9yQGUFks5s5QMegaJpZM4QSxsg
.
— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/monnappa22/Limon/issues/11#issuecomment-346807753, or mute the thread https://github.com/notifications/unsubscribe-auth/ARPwClMfPC4U5p7bs1rpQ6NfIMptag9iks5s5qg-gaJpZM4QSxsg .
Filetype: ASCII text, with CRLF line terminators File Size: 398.14 KB (407691 bytes) md5sum: caeb0af1b08ceed22bdac976a06445aa ssdeep: 1536:BUqKGeBdKfwzGQVYzxfOOnU6sD5/I3l1Lc+xjarw2g6yN4SRwkGzpT7qH/u763F5:BnZFOFo9Ap9BgCz7re ssdeep comparison: /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100) /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100) /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100) /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100) /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100) /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100) /home/limonuser/Downloads/996666.elf matches /root/linux_reports/ssdeep_master.txt:/home/limonuser/Downloads/996666.elf (100)
Virustotal:
Starting virtual machine for analysis
...done...
adding ip port redirection entries
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
REDIRECT udp -- anywhere anywhere udp dpts:2:6 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:8 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:10:12 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:14:16 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:msp redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:20:36 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:38:52 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:54:bootpc redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:gopher:122 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:124:who redir ports 1
REDIRECT udp -- anywhere anywhere udp dpts:515:65535 redir ports 1
REDIRECT udp -- anywhere anywhere udp dpt:echo redir ports 7
REDIRECT udp -- anywhere anywhere udp dpt:discard redir ports 9
REDIRECT udp -- anywhere anywhere udp dpt:daytime redir ports 13
REDIRECT udp -- anywhere anywhere udp dpt:17 redir ports 17
REDIRECT udp -- anywhere anywhere udp dpt:chargen redir ports 19
REDIRECT udp -- anywhere anywhere udp dpt:time redir ports 37
REDIRECT udp -- anywhere anywhere udp dpt:domain redir ports 53
REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 69
REDIRECT udp -- anywhere anywhere udp dpt:ntp redir ports 123
REDIRECT udp -- anywhere anywhere udp dpt:syslog redir ports 514
REDIRECT tcp -- anywhere anywhere tcp dpts:2:6 redir ports 1
REDIRECT tcp -- anywhere anywhere tcpINetSim 1.2.7 (2017-10-22) by Matthias Eckert & Thomas Hungenberg
PIDfile '/var/run/inetsim.pid' exists - INetSim already running?
dpts:8:12 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:14:16 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:msp redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:ssh:24 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:26:36 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:38:52 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:54:78 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:81:pop2 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:sunrpc:112 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:114:442 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:snpp:kpasswd redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:466:ftps-data redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:991:ircs redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:996:6666 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpts:6668:65535 redir ports 1
REDIRECT tcp -- anywhere anywhere tcp dpt:echo redir ports 7
REDIRECT tcp -- anywhere anywhere tcp dpt:daytime redir ports 13
REDIRECT tcp -- anywhere anywhere tcp dpt:qotd redir ports 17
REDIRECT tcp -- anywhere anywhere tcp dpt:chargen redir ports 19
REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 21
REDIRECT tcp -- anywhere anywhere tcp dpt:smtp redir ports 25
REDIRECT tcp -- anywhere anywhere tcp dpt:time redir ports 37
REDIRECT tcp -- anywhere anywhere tcp dpt:domain redir ports 53
REDIRECT tcp -- anywhere anywhere tcp dpt:finger redir ports 79
REDIRECT tcp -- anywhere anywhere tcp dpt:http redir ports 80
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3 redir ports 110
REDIRECT tcp -- anywhere anywhere tcp dpt:auth redir ports 113
REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 443
REDIRECT tcp -- anywhere anywhere tcp dpt:urd redir ports 465
REDIRECT tcp -- anywhere anywhere tcp dpt:ftps redir ports 990
REDIRECT tcp -- anywhere anywhere tcp dpt:pop3s redir ports 995
REDIRECT tcp -- anywhere anywhere tcp dpt:ircd redir ports 6667
Chain INPUT (policy ACCEPT) target prot opt source destination
Chain OUTPUT (policy ACCEPT) target prot opt source destination
Chain POSTROUTING (policy ACCEPT) target prot opt source destination
cleaning inetsim log directory cleaning inetsim report directory starting inetsim Waiting for all the services to start transferring file to virtual machine Error: A file was not found
Exiting the program
Hi,
We send the output file to your github mail ID. Please kindly help on this to get our issue fixed.
Thanks & Regards, Avinash.V
Hi ,
Are we missing anything? Please help on this.
Regards, Avinash
Hi,
We checked the configuration files, Still we face the issue. Please kindly help on this. Are we missing anything?
Regards, Avinash
Hi @avinashx11 ,
Were you able to solve the issue? I receiving very similar errors.
Regards, Lukasz
Hi,
It is a Amazing project. when we deployed the Limon we facing some issue in analyzing the file. Are we missing some files. Please help us.
Filetype: Debian binary package (format 2.0) File Size: 294.05 KB (301108 bytes) md5sum: 90fb6fdf8e3e9014c9ca136dc590e0c4 ssdeep: 6144:KPtJQlgLirXcDwMuzWP9mowX2Hz5m96+tanGaEnCOLdY2+ho/boueFNQP1P1r:MslgurMEHzy9mf2Y4LG5JF+hoDoueod1 readelf: Error: Not an ELF file - it has the wrong magic bytes at the start readelf: Error: Not an ELF file - it has the wrong magic bytes at the start readelf: Error: Not an ELF file - it has the wrong magic bytes at the start Traceback (most recent call last): File "limon.py", line 190, in
elf_header = static.elf_header()
File "/home/samuser/Downloads/Limon-master/statan.py", line 123, in elf_header
output = subprocess.check_output(["readelf","-h",self.file])
File "/usr/lib/python2.7/subprocess.py", line 573, in check_output
raise CalledProcessError(retcode, cmd, output=output)
subprocess.CalledProcessError: Command '['readelf', '-h', '/root/Linux_malwares/inetsim_1.2.7-1_all.deb']' returned non-zero exit status 1
NOTE: While submitting the elf file also we facing the same issue.
Kindly help on this .
Thanks & Regards, Avi.