Browse code

secfilter: update readme [skip ci]

Jose Luis Verdeguer authored on 12/03/2019 12:27:45
Showing 1 changed files
... ...
@@ -609,6 +609,26 @@
609 609
        </example>
610 610
      </section>
611 611
 
612
+	<section id="secfilter.r.stats">
613
+       <title>
614
+		<function moreinfo="none">secfilter.stats</function>
615
+	  </title>
616
+ 
617
+ 		<para> 
618
+		Print statistics of blocked and allowed messages.
619
+ 		</para> 
620
+ 
621
+ 		<example>
622
+         <title><function>secfilter.stats</function> usage</title>
623
+ 
624
+         <programlisting format="linespecific">
625
+		...
626
+		&kamcmd; secfilter.stats
627
+		...
628
+		</programlisting>
629
+       </example>
630
+     </section>
631
+
612 632
 	<section id="secfilter.r.add_dst">
613 633
        <title>
614 634
 		<function moreinfo="none">secfilter.add_dst</function>
... ...
@@ -760,5 +780,94 @@
760 760
 		</para>
761 761
      </section>
762 762
 	</section>
763
+
764
+ 	<section>
765
+     <title>Some examples</title>
766
+ 
767
+	<section>
768
+       <title>Print data</title>
769
+ 
770
+       <example>
771
+         <title>kamcmd secfilter.print ua</title>
772
+ 
773
+         <programlisting format="linespecific">
774
+		...
775
+User-agent
776
+==========
777
+[+] Blacklisted
778
+    -----------
779
+    0001 -> friendly-scanner
780
+    0002 -> pplsip
781
+    0003 -> sipcli
782
+    0004 -> sundayddr
783
+    0005 -> iWar
784
+    0006 -> sipsak
785
+    0007 -> VaxSIPUserAgent
786
+    0008 -> SimpleSIP
787
+    0009 -> SIP Call
788
+    0010 -> Ozeki
789
+    0011 -> VoIPSec
790
+    0012 -> SIPScan
791
+    0013 -> Conaito
792
+    0014 -> UsaAirport
793
+    0015 -> PortSIP VoIP SDK
794
+    0016 -> zxcvfdf11
795
+    0017 -> fdgddfg546df4g8d5f
796
+
797
+[+] Whitelisted
798
+    -----------
799
+    0001 -> my custom ua
800
+		...
801
+		</programlisting>
802
+ </example>
803
+     </section>
804
+
805
+	<section>
806
+       <title>Statistics</title>
807
+ 
808
+       <example>
809
+         <title>kamcmd secfilter.stats</title>
810
+ 
811
+         <programlisting format="linespecific">
812
+		...
813
+Blocked messages (blacklist)
814
+============================
815
+[+] By user-agent    : 1256
816
+[+] By country       : 45
817
+[+] By from domain   : 0
818
+[+] By to domain     : 0
819
+[+] By contact domain: 1
820
+[+] By IP address    : 2552
821
+[+] By from name     : 0
822
+[+] By to name       : 0
823
+[+] By contact name  : 0
824
+[+] By from user     : 316
825
+[+] By to user       : 134
826
+[+] By contact user  : 0
827
+
828
+Allowed messages (whitelist)
829
+============================
830
+[+] By user-agent    : 0
831
+[+] By country       : 478
832
+[+] By from domain   : 0
833
+[+] By to domain     : 0
834
+[+] By contact domain: 0
835
+[+] By IP address    : 0
836
+[+] By from name     : 0
837
+[+] By to name       : 0
838
+[+] By contact name  : 0
839
+[+] By from user     : 0
840
+[+] By to user       : 0
841
+[+] By contact user  : 0
842
+
843
+Other blocked messages
844
+======================
845
+[+] Destinations   : 0
846
+[+] SQL injection  : 213
847
+		...
848
+		</programlisting>
849
+ </example>
850
+     </section>
851
+	</section>
763 852
 </chapter>
764 853