From: Glen Stewart
To: valankar@bigfoot.com
Subject: incident add-on
Date: Sun, 11 Aug 2002 15:11:31 -0400        

Attached is a modified version of WorMeter.pl that will generate report files
that incident.pl can operate on, to report attacks on Apache web servers.
WorMeter seems to have faded from the scene, but was so much easier to work
with than Wormscan (does the same thing, but written in Java).

Run it like (all one line in crontab):                 
/home/incident-2.2/wormeter.pl > /dev/null 2>&1;/home/incident-2.2/incident.pl                
- -A -d "Scan/Attack on your.com" -b /tmp/wormeter.rpt > /dev/null 2>&1

Feel free to put links on your web site to download WorMeter there - you'd do
others a favor, since they wouldn't find it elsewhere.