To get the whole thing running on your system will require 5 steps. It looks complicated but it is just because of the number of different files that combine to make this whole thing work:
(1) A copy of the latest version of ICEWatch (which you may already have).
(2) A copy of Perl for Win32.
I'm told that ActivePerl works well; it's free and you can download it from http://www.activestate.com/ActivePerl/download.htm. It is pretty straightforward to install. Just make sure that after installing, the Perl executable directory is in your path (i.e. you should be able to go to a DOS prompt and type perl from any directory and have Perl be found and executed).
(3) A Perl script to convert the BlackICE Defender attack log file into an HTML format file.
This is the file log.pl from the package downloaded from the link at the bottom of this page. Note: even if you are not a programmer or don't understand Perl it should be straightforward to edit the text in the Perl script to suit your needs. Just load it up in any text editor and change the relevant lines. For example to change the style of the HTML it will output just edit the lines after the print << line and before the EOF line. The script assumes the default installation location of the BlackICE Defender log file at C:\Program Files\ISS\BlackICE\attack-list.csv, but change the Perl script accordingly if yours is different.
(4) A MS-DOS batch file that will call the Perl script and then send the converted file out to your web site via FTP.
The standard Windows command-line FTP program does the job quite nicely. Let's take a look at the batch file called uplog.bat, which is contained in the package downloaded from the link at the bottom of this page. Let's say you'll put all of these files in a directory on your PC called icelog in your root directory; here's how it looks:
@echo off
cd \icelog
perl log.pl > log.html
ftp -n -s:ftp.txt
echo Log file uploaded
exit
(
5) A text file that will be used for the commands to the FTP program.This is the ftp.txt file from the package downloaded from the link at the bottom of this page. Here's what it looks like:
open members.home.com
user myusername mypassword
lcd \icelog
bin
put log.html
quit
Change members.home.com to the name of your ISPs FTP site where your Web pages reside, and change myusername mypassword to the username and password you use to access the FTP site where the log file will be uploaded.
Phew! OK, now putting it all together...
Finally, the finishing touch...
Click here to download the zip file containing the Perl script, the batch file and the FTP script file. Don't forget to change the FTP script file to use your ISP, username and password, and if you want to put these files into a directory other than \icelog then you'll also need to change that. Remember to also edit log.pl to change occurrences of yourname to your name and your\@address to your e-mail address (be sure the \ before the @ – e.g. if your e-mail address is me@isp.com then use me\@isp.com in the file).
That's it!
If you'd like to see a live version of a BlackICE log page, please visit http://members.home.nl/jacengel/log.html.