psad-2.0.8 release - visualizing iptables logs

Michael Rash <[email protected]>
Newsgroups gmane.comp.security.ids
Message-ID <20070729031904.GA14958@minastirith>
Hi -

psad-2.0.8 has been released:

http://www.cipherdyne.org/psad/download/

This release adds a whole new set of --gnuplot options so that iptables
log data can be visualized with Gnuplot in addition to AfterGlow.  I
gave a talk about this at OSCON, and here are the slides in case anyone
is interested (the talk included visualizations of iptables log data
from the Honeynet Scan34 challenge):

http://www.cipherdyne.org/talks/Michael_Rash_OSCON_2007.pdf

Here is a blog post with a couple of the graphs visible:

http://www.cipherdyne.org/blog/2007/07/oscon-2007-talk-slides-iptables-attack-visualization.html

Here is the psad-2.0.8 ChangeLog (many thanks to all who have contributed):

http://trac.cipherdyne.org/trac/psad/browser/psad/tags/psad-2.0.8/ChangeLog

--
Michael Rash
http://www.cipherdyne.org/
Key fingerprint = 53EA 13EA 472E 3771 894F  AC69 95D8 5D6B A742 839F

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.