This is the Python 3 version of my email file analysis tool (eml).
emldump_V0_0_11.zip (https)
MD5: 09408ED0C2183178BEA71459CE001995
SHA256: 01B3543CCBAE806E1536BF55E62DF7D30885737909DB4322348AC521138660CC
Sunday 29 November 2020
Update: emldump.py Version 0.0.11
3 Comments »
RSS feed for comments on this post. TrackBack URI
Didier Stevens 
[…] Update: emldump.py Version 0.0.11 […]
Pingback by Week 49 – 2020 – This Week In 4n6 — Sunday 6 December 2020 @ 8:53
Hi Did,
I have a very trivial project in mind. I think it’s very simple (or I hope so), but I really can’t figure it out, or at least, I am not able to determine the simplest way to do it.
I thought about Python3 and Sqlite3, but maybe it is not the more straightforward way.
So, what is my idea… I want to take some Cisco ASA connections logs and translate them in a human readable form.
Say, for example, the following string:
192.168.10.10 -> 57.68.72.90/10240
should be translated to:
PC-LABORATORY -> IBERIA
Very easy, isn’t it? Not for me unfortunately 😪
Sources and destinations ip addressess are all well known, so I can associate every ip address with its human-readable string; they are thousands, so I would create something like a dictionary (excel? sql db? python dictionary? what else?)
Long story short, I don’t want a solution, just your thoughts about what language and/or data structure you would think of. I can’t really get it, even if I am a grep/sed/awk fan!
Thank you very much for your attention and sorry for having stolen a bit of your precious time.
Have a good 2021🍾 😉
Gian
Sent from mobile
Comment by Gian Matteo Esposito — Saturday 2 January 2021 @ 14:48
In what (file) format do you have the hostnames now?
Comment by Didier Stevens — Sunday 3 January 2021 @ 10:11