[Zeek] DNS logs Anonymization

Mark Gardner mkg at vt.edu
Wed Nov 6 05:13:55 PST 2019


On Wed, Nov 6, 2019 at 1:23 AM Muhammad Abdullah <
14beemabdullah at seecs.edu.pk> wrote:

> I've just started using Zeek to collect DNS logs by running it from the
> CLI. I want to anonymize the IPs contained in these logs. How should I go
> about it?
>

We wrote a C++ program that uses the CryptoPANT library (
https://ant.isi.edu/software/cryptopANT/index.html). We first considered
using CryptoPAN (
https://www.cc.gatech.edu/computing/Telecomm/projects/cryptopan/ ; seems to
be unavailable at the moment) but found the other library much easier to
use and it is actively maintained.

Mark
-- 
Mark Gardner
--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20191106/9ad1b46e/attachment.html 


More information about the Zeek mailing list