PortscanGeoinfo is a plugin for the powerful Prelude correlation engine. This plugin correlates alerts from Snort NIDS and OSSEC HIDS sensors regarding portscans. Geographical information (GeoIP) is included in the correlated alert.
Features
- GeoIP lookup
- correlation of IDMEF events (prelude-correlator)
- correlation of portscans
Categories
Network MonitoringLicense
GNU General Public License version 2.0 (GPLv2)Follow PortscanGeoinfo
Other Useful Business Software
Ship Agents Faster
Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of PortscanGeoinfo !