Search Results for "snort log"

SNĒZ is a web interface to the popular open source IDS programs SNORT® and Suricata. IDS output can be unified2 or JSON formats. The main design feature of SNĒZ is the ability to filter alerts based on criteria set by, and documented by, a security analyst. Alerts are viewed and summarized in different ways, filtered, and documented until ideally no alerts remain. At any time, filters can be suppressed so that all collected alerts can be analyzed for patterns, forensics, etc. Filters can also...

This project is a plug in written in R and python language that makes a driver for Pyflag that allows forensic task for snort alert logs.

Note: This software isn't tested enough yet and may work not correct. But it will be very helpfull to get more test results. For this the application will output a logging file. If there are any errors please contact me and send me the logging file. This Java application reads the snort logging csv files and detects user specified messages. Based on this results the application sends an email to the responsible administrator of the snort observed network.

ES: AnalogIDS es un analizador de logs de snort escrito en python que permite la generación de estadisticas de conexiones establecidas, protocolos y alertas de seguridad. Ademas permite generar gráficos de barra y pastel de las estadisticas. EN: AnalogIDS is a snort log analyzer written in python that allows the generation of statistics established connections, protocols and security alerts. You can generate bar graphs and pie statistics.

Open Source system and network monitoring application for desktop Linux user. It gives end-user broader view of what happening on their system. The basic idea is give linux user application that can monitor system like many commercial antivirus HIDS.

redWall is a bootable CD-ROM Firewall with Snort, snortsam, dansguardian and support for fwbuilder, spamassassin, reporting (using ACID/sarg/ntop/webfwlog), VPN (FreeSWan/PoPToP/Openvpn) and mail alerting (by mail). Configs are stored on a Floppy or USB

This project focuses on developing an SMS alert system that has function to give an alert message to registered web server administrators whenever an intrusion is occurred. The alert is generated from Snort log file.

This project is an attempt to redesign the snort database schema and to provide a new analysis frontend and associated tools.

Biik: A Zoomable, Context-Aware Visualization System for SNORT IDS

A framework for information security management. It has the centralized server for managing the IDS sensors, log consolidation and correlation, report generation etc. Also it has customized IDS sensor based on snort.

Logrep is a tool for collection and presentation of information from various logfiles including snort, squid, postfix, apache, sendmail, iptables/ipchains and nt eventlogs. HTML-reports, multi dimensional analysis, ssh and graphs are available.

Snort KDE Alerter - this application analyzes snort (+acid) logs (from file or from DB) and in case of new alert displays it in a popup window. It can be integrated into KDE (minimize in the KDE tray). Application permits setting filters, and various sett

phpSAM is a tool written in PHP intended to handle the events logged by snort(snort.org) in MySQL. There is being worked on making graphs more intuitive. For an update on the progress, please do not hesitate to visit phpsam.sf.net

PACIE (Perl Analysis Console for Intrusion Events) Attempts to be a complete replacement for ACID. Place this cgi script on your internal webserver and receive powerfull reporting on your current snort database.

A Python script that parses and mails ipchains, iptables and snort logfiles into the DSHIELD format for submission to DShield.org

PHP based log monitoring and ticketing system for Snort IDS logging to a mySQL database.

The port scan plug in for snort, or just portscan for short is intended to be used in conjunction with snort and logcheck. The tool will allow you to monitor your snort log file and then do port scans based upon certain keywords.

Loghog was designed to take a proactive stance on snort output. It supports multilog processing and is optimized for high volume traffic. LogHog responds to events by conducting actions such as email and blocking

Sagan can alert you when events are occurring in your syslogs that need your attention right away, in real time!