Tools written/modified by Dave Dittrichipgrep (MD5 hash) Searches for hosts by finding domain names that end in some arbitrary domains and/or are IP addresses that reside in arbitrary CIDR blocks. Useful for identifying or excluding your own hosts in reports of hundreds of compromised victims. tcpdstat (MD5 hash) Produces a per-protocol breakdown of traffic by bytes and packets, with average and maximum transfer rates, for a given libp
