rule2hex

r2hex is a python class for parsing snort or suricata rules

Brought to you by: r2hex

Downloads: 0 This Week

Last Update: 2014-03-22

Browse Code

Get an email when there's a new version of rule2hex

r2hex is a python class for parsing snort or suricata rules. Data in hexadecimal format is generated by the class that can be used to generated network data and used to trigger the alert.
To be completed

Features

A database creation script is provided that uses the r2hex class to parse emerging snort rules and to build a postgres database based on the rules, with the packet_data field containing the network data that will cause Snort/Suricata to alert.

Project Activity

See All Activity >

Follow rule2hex

rule2hex Web Site

Other Useful Business Software

MongoDB Atlas runs apps anywhere Icon

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Rate This Project

Login To Rate This Project

User Reviews

Be the first to post a review of rule2hex!

Additional Project Details

Programming Language

Registered

2014-01-14

Report inappropriate content

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Recommended Projects

SELKS
A Suricata based IDS/IPS/NSM distro
Suricata Anti-DDoS Lab
Suricata VMware VM dor IDS practicing
Awesome Prometheus Alerts
Collection of Prometheus alerting rules
Alerta
Alerta monitoring system
SNEZ
SNĒZ is a web interface to the popular open source IDS programs SNORT® and Suricata. IDS output can be unified2 or JSON formats. The main design feature of SNĒZ is the ability to filter alerts based on criteria set by, and documented by, a security analyst. Alerts are viewed and summarized in different ways, filtered, and documented until ideally no alerts remain. At any time, filters can be suppressed so that all collected alerts can be analyzed for patterns, forensics, etc. Filters can also be used to hide noisy alerts without deleting them or suppressing them at the IDS. An effective strategy for dealing with noisy alerts can be achieved by combining alert thresholding at the IDS and filtering in SNEZ. SNORT® is a registered trademark of Sourcefire, Inc. All rights reserved.