Re: ssn_groups_Jan10.csv link to download or file format snort 2.8.6.0

[IT Security <itsecurity () radford edu>]

Lawrence R. Hughes, Sr. wrote:
> Thanks JJC for your information:
>
> On a monthly basis, the Social Security Administration publishes a list of which Group numbers are in use for each 
> Area.  These numbers can be updated in Snort by supplying a CSV file with the new maximum Group numbers to use.  By 
> default, Snort recognizes Social Security numbers issued up through November 2009.
>
> from google:
> http://www.socialsecurity.gov/employer/ssnvhighgroup.htm
>
> We need a url that points to the file: ssn_groups_Jan10.csv
>
> The Snort (2.8.6) user manual also mentions the file "ssn_groups_Jan10.csv", so where is it?
> What is the format of this file for use with snort?
>
> The above link just has flat text files for downloads, I think if snort referenced the file ssn_groups_Jan10.csv, 
> then someone should have it. We just need to see it so we can convert the SSN Groups to a csv file.
>
> Thanks,
> Larry

=====================
import re
import urllib

pattern = re.compile('\d{3} \d{2}')

fp = urllib.urlopen("http://www.ssa.gov/employer/ssns/highgroup.txt";)
data = fp.read()
fp.close()

highgroups = pattern.findall(data)

fp = open('areas_groups.txt', 'w')
for group in highgroups:
    a, g = group.split()
    print a, g
    fp.write("%s,%s\n" %(a,g))
fp.close()

print len(highgroups), "Area and Group pairs downloaded."
=====================

Produces this sort of output:

001,08
002,08
003,08
004,11
005,11
006,11
007,11
008,94
009,92
010,92
011,92
012,92
013,92
014,92
015,92
016,92
017,92
018,92
019,92
020,92
021,92
022,92
023,92
024,92
025,92
026,92
027,92
028,92
029,92







------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users