gslist command line option of -z

simon · **Joined:** 20 Jul 2008 20:02 **Posts:** 8

Hello. I am trying to use the -z command line option, but I get an error.

I started by first creating a file, here is command line and output:

Code:

C:\under\grams\gslist>gslist -n ut3pc -o c:\under\grams\gslist\stream1.txt

Gslist 0.8.4e
(then your contact info)

Receiving:   .. 5637 bytes
-----------------------

930 servers found

And I opened the file after and it had a bunch of servers and ports in it.

I then try to use the -z option to read it, but I get an error, perhaps my command line parameters are wrong. Here are a couple of tries:

Code:

C:\under\grams\gslist>gslist -z c:\under\grams\gslist\stream1.txt

C:\under\grams\gslist>gslist -n ut3pc -z c:\under\grams\gslist\stream1.txt

But they both game me this output:

Code:

Gslist 0.8.4e
(then your contact info)

Gamename:
Enctype:     1
Filter:
Resolving    127.0.0.1 ... 127.0.0.1:28900
- open file c:\under\grams\gslist\stream1.txt

Error: Unable to resolv hostname (Gamename)

How can I supply the gamename in the command line?

Here is the contents of the file for reference:
http://www.birdieman.com/flink/stream1.txt

Thanks.

aluigi · **Posted:** 14 Mar 2009 18:48

you must remove the header of gslist from stream1.txt, in short if must contain directly the IP addresses (so the first line in your example must start with 77.244.246.100).

fyi, you are using a jurassik version of gslist, the latest one is 0.8.8: http://aluigi.org/papers.htm#gslist

simon · **Joined:** 20 Jul 2008 20:02 **Posts:** 8

Thanks, I removed the header, and now it works.

Jurassik, heh :)

So I tried to download (I tried twice) the new gslist at the above link, but my Antivirus program, ESET's NOD32, wouldn't let me, it said it had a virus. Here is the report:

Code:

- <ESET>
- <LOG>
- <RECORD>
  <COLUMN NAME="Name">http://aluigi.org/papers/gslist.zip</COLUMN> 
  <COLUMN NAME="Threat">probably a variant of Win32/Genetik trojan</COLUMN> 
  <COLUMN NAME="Action">connection terminated - quarantined</COLUMN> 
  <COLUMN NAME="Information">Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.</COLUMN> 
  </RECORD>
- <RECORD>
  <COLUMN NAME="Name">http://aluigi.org/papers/gslist.zip ?? ZIP ?? gslistweb.exe</COLUMN> 
  <COLUMN NAME="Threat">probably a variant of Win32/Genetik trojan</COLUMN> 
  <COLUMN NAME="Action" /> 
  <COLUMN NAME="Information" /> 
  </RECORD>
  </LOG>
  </ESET>

Just showing this for your FYI, not sure if you want to do anything about it. I guess I'll just continue on with 0.8.4e for now.

aluigi · **Posted:** 14 Mar 2009 20:09

it's a false positive, and as far as I can see from your log it affects only gslistweb.exe (that you don't need) so you can get gslist.exe from that zip.
you can do it by disabling temporary the AV (so you can download the zip) or you can even use my zipweb tool:

zipweb -d gslist.exe http://aluigi.org/papers/gslist.zip

Luigi Auriemma

gslist command line option of -z