problem with DoS-Deflate after install apache 2

[Yarden]

bezrat ha shem


when the dos deflate run, it give ban to nobody ip..

when i run:
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n


i get:

1364
14 217.132.221.**
3 127.0.0.1
2 79.181.147.**
..........

( i am censored this..)


the first line is without ip, and only show the number of connections.

the script is ban him.. it think the ip is 1364 and write number of connections is 1364..



expamle:

Banned the following ip addresses on Sat Dec 13 18:28:44 IST 2008

585 with 585 connections

 

[littleoak]

Did you use my DA specific version of DDoS Deflate? If not, modify the netstat line in your ddos.sh file to:

netstat -ntu | grep ffff | awk '{print $5}' | cut -d: -f4 | sort | uniq -c | sort -nr > $BAD_IP_LIST

 

[Yarden]

thanks!!!!!!!