Snort and Mysql for statistics purposes

David Jiménez Domínguez <[email protected]>
Newsgroups gmane.comp.security.ids.snort.general,gmane.comp.security.honeypots,gmane.comp.security.ids
Message-ID <[email protected]>
Hi folks!

I need to graph all the traffic in my network (Top ports, Top src_ip,
Top attacks) each 5 minutes...In the DataServer I have intalled Mysql
and in the firewall I have installed snort-2.3.0 and I created just 4
rules to get all the tcp,udp,icmp and ip traffic in order to graph it
with perl and rrdtool and post it in a web page....

Do you think it is the best way to do that???
Have your ever done something like that?? What tools do you recommend me??
 
Regards 

DJ
--------------------------------------------------


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.