Re: DNS logs Anonymization
Mark Gardner <[email protected]> Wed, 6 Nov 2019 08:13:55 -0500
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAG=_CgDeAi9dh88e=VT3K18QaohT8hR4ikHei7kiE-nFU+Zg8A@mail.gmail.com> |
On Wed, Nov 6, 2019 at 1:23 AM Muhammad Abdullah < [email protected]> wrote: > I've just started using Zeek to collect DNS logs by running it from the > CLI. I want to anonymize the IPs contained in these logs. How should I go > about it? > We wrote a C++ program that uses the CryptoPANT library ( https://ant.isi.edu/software/cryptopANT/index.html). We first considered using CryptoPAN ( https://www.cc.gatech.edu/computing/Telecomm/projects/cryptopan/ ; seems to be unavailable at the moment) but found the other library much easier to use and it is actively maintained. Mark -- Mark Gardner -- _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek