Help me remember server scanner tool name

jeffschips

• August 18, 2020 19:20

Hello, here is a simple request. A while back I came across a command-line perl or similar tool that when executed would scan your system for email activity and report which accounts sent out how many emails, etc. It is useful for seeing if a system has been compromised. I forgot the name but it was something like: ec or ce with command line switches. Thoughts?

• 

  jeffschips

  • August 19, 2020 02:00

  SOLVED: ecpp -h to get help from the /usr/bin/ecpp

  0
• 

  jeffschips

  • August 19, 2020 02:15

  Except it doesn't work. Anybody have some suggestions? Is this tool still being used? Can anyone get it to work. Back in the day it was very useful at tracking emails sent by accounts/users, in a period of time, etc. ecpp -c root@domain.com ecpp_2.pl - Version: 20130416 - Michael Karr Finding the creation time of: root@domain.com User: root Domain: domain.com readdir() attempted on invalid dirhandle $archivedh at /usr/bin/ecpp line 233. closedir() attempted on invalid dirhandle $archivedh at /usr/bin/ecpp line 239. Processing: /usr/local/cpanel/logs/access_log Progress: 100%

  0
• 

  cPanelLauren

  • August 19, 2020 19:53

  Ahh this is a really old script. We have the following (unofficial) custom script our tech support uses sometimes for this purpose: perl <(curl -s https://raw.githubusercontent.com/cPanelTechs/SSE/master/sse.pl) -s
  

  0
• 

  jeffschips

  • August 19, 2020 21:25

  Thanks!

  0

Please sign in to leave a comment.