PortscanGeoinfo is a plugin for the powerful Prelude correlation engine. This plugin correlates alerts from Snort NIDS and OSSEC HIDS sensors regarding portscans. Geographical information (GeoIP) is included in the correlated alert.
- GeoIP lookup
- correlation of IDMEF events (prelude-correlator)
- correlation of portscans
Be the first to post a review of PortscanGeoinfo !