Re: Netflow

ScottO <[email protected]> Mon, 28 Jun 2010 18:08:11 -0400
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
I've done some stuff working with Argus which is a type of flow data.  More
for various types of alerts.

One in perl here:

http://alpine.bitparser.com/content/code/argusminer.pl.txt

And a more recent work in python here:

http://alpine.bitparser.com/content/code/hornet.py.txt

No really production ready and could use many more features, but fwiw.

Scott

On Mon, Jun 28, 2010 at 2:49 PM, Schubert, Aaron
<[email protected]>wrote:

> Can prelude process netflow data?  If so is there documentation on
> getting that setup and registering that with prelude?
>
>
>
> _______________________________________________
> Prelude-user site list
> [email protected]
> http://lists.prelude-technologies.com/mailman/listinfo/prelude-user
>
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user