###logparser3.py This utility was inspired by the need to harden a Raspberry Pi co-located with pcextreme.nl in the Netherlands. Right from the get-go it was being constantly attacked. Analysis of the logs (auth.log is the most useful) suggested that certain IP addresses should be blocked outright and since there are many, using ipset with iptables seems the best solution.

Some attackers make thousands of attempts creating very large log files. Hence the incentive to automate log file analysis and provide output in a form easily used with ipset.

logparse3.py and akparser3.py, a local dependency, are heavily documented inside usage statements within the code. Also included (with it's own licensing) is docopt.py, an extremely useful third party module invaluable for setting up a usage statement and capturing command line arguments, from an SPoT (Single Point of Truth- Described by Eric Raymond in The Art of Unix Programming.)

Although not extensively tested, the code does appear to be functioning in it's current (v0.2.5) iteration.

Although I'm less taken by the need to do so now, at one time this seemed to have some apeal: http://docs.python.org/3/library/collections.html#collections.Counter

Comments, suggestions and even just plain criticisms welcomed. (alex at kleider dot ca)

As of early August, 2014, Glen Jarvis has expressed a willingness to peek at the code and perhaps even collaborate. I'm sure that, with the help of pylint, he'll find much fodder for criticism which I will be happy to hear in the quest to improve!