#!/usr/bin/perl # written by Florian Buchholz # May 2002 # Part of Honeynet Challenge open FH, $ARGV[0]; while () { /^(\S+)/; $procs{$1} = 1; } close FH; open FH, $ARGV[1]; $printlines = 1; while () { if ($printlines) { if (/^(L080[^\(]+)\(/) { if ($procs{$1} == 1) { $printlines = 0; } else { print; } } else { print; } } else { if (/^}\s*$/) { $printlines = 1; } } }