- live-attack-monitor.sh:
* Remove snapshot loading (start fresh each session)
* Fix Apache log monitoring to use tail -n 0 -F (only new entries)
* Add IP file sync to main loop for auto-blocking to work
* Fix IP_DATA consolidation for cross-process communication
- bot-analyzer.sh:
* Implement gzip compression for large temp files (10-20x space savings)
* Update all read/write operations to use compressed files
* Fix for servers with 200+ domains and millions of log entries
- run.sh:
* Add HISTFILE fallback to prevent crashes when sourced
New workflow:
1. User runs: source run.sh (instead of bash launcher.sh)
2. Launcher runs normally
3. On exit with cleanup=yes, launcher sets flag file
4. Wrapper detects flag and does ALL cleanup automatically:
- Cleans ~/.bash_history file
- Clears current shell's in-memory history
- Removes toolkit directory
- No manual commands needed
The key: wrapper is SOURCED so it runs in parent shell and can modify history.
User experience: answer "yes" and cleanup happens instantly, automatically.
cschantz