Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Thrasher log parser that will interact with iptables as it detects activity
branch: master

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
README
TODO
logdrop.py
thrashd.log

README

Tails a thrashd.log file and adds/removes entries to iptables filter chain or routing table using route command.

IPtables can tank the performance a host when you have >100k distinct IPs in an iptables filter chain (yes, some people have this many). However, injecting a local 'route' does not have the same performance impact at the same high count of unique IP's.

Default method is still iptables.

"holding down" = add drop
"expired"      = remove drop

No error-checking or general intelligence yet.
Something went wrong with that request. Please try again.