Pyflag snort alert log driver plug-in Files

Snort Alert Log Plugin for Pyflag
It is preset log plugin for Snort alert logs with interface

12 feb 2012 
Afshin Sadeghi
Bonn Germany
Sadeghi.afshin at gmail dot com
This program is in R and Python programming language as Network Security
lab task in the university of Bonn.It is made for educational purpose 
and there is no responsibility about the usage and errors in the code. 


1.How to Install:

	1.Requirements install:
 	   To read the  file rpy2 must be installed.
	   rpy2 library for python is in the folder.

	2:copy snortalert.py to address:
		Before installation of pyflag :
						in the folder:	pyflag/src/plugins/LogAnalysis 
		Or after installation of pyflag:

						in the folder:	/usr/local/lib/python2.7/dist-packages/pyflag/plugins/


2.How to use:
	
	A new preset called snort aler log will be added to log preset type list.

	First go to log analysis menu,
	then choose a creat new log preset,
	click snort alert log from the list,
	choose a snort alert log file,and then run the plugin on it,
	choose the type of snort alert log file from the list,
	the field types and names are defined but can be changed by the user,
	choose the proper case and produce table from the logfile.
	now the result table is ready for queries or exporting.


3.In this folder exits: 
	Snortalert.py     			Snortalert log plugin for pyflag.
	readme.txt	  			This file you are reading now
	rpy2-2.2.3.tar.gz  			A library for python needed to run this plugin.
	snortsysalertlogwith interface.log	A sample snort alert log file.