GUI for Snort XML Logs written with OpenBSD users

Contributed by jose on 2003-02-20 from the XMLized-packets dept.

Sleepy writes:

"ACID-XML is an application, developed 80% of the time on OpenBSD, and runs on OpenBSD and it will give you a very nice view of those snort XML logs. the tarball is available from http://www.maximumunix.org , it contains a i386 binary + sources and Makefile if you wanna modify and compile. it even contains the .ui file so you can adjust the GUI to your preference with designer. wanna see how it looks? http://www.maximumunix.org/images/ACIDXML-UNIX.png Run OpenBSD on your desktop :)"

I've seen various Snort front ends and some are better than others. The diversity is good, though, and XML adds some flexibility that many of the others lack.

(Comments are closed)

Comments

By Eric Bullen () ericb_obsd@thedeepsky.com on 2003-02-20 18:17 http://www.thedeepsky.com

I am using a reporting tool that runs every minute in cron (low impact). This generates a nice report that is sent via email. I wrote this myself, and figure I should share it with others (I love the layout obviously). Anyway, enjoy, and I hope others like it as well...

Here's the file:
http://www.thedeepsky.com/files/snort_mon.pl

-Eric
By Anonymous Coward () on 2003-02-21 18:20

Did anyone download this stuff?did you find it worthy?do you think converting pflogs to XML and integrating it with the IDS a good idea?
can the sysadmin sect of the *NIX community point out a direction a developer who would like to contribute can take?any apps you thought are important but dont exist yet?

Latest Articles

Tue, Sep 10
- 05:39 Game of Trees 0.103 released (0)
Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]