From: Michael Rash (mbrcipherdyne.org)
Date: Sat Jul 28 2007 - 22:19:04 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi -

psad-2.0.8 has been released:

http://www.cipherdyne.org/psad/download/

This release adds a whole new set of --gnuplot options so that iptables
log data can be visualized with Gnuplot in addition to AfterGlow. I
gave a talk about this at OSCON, and here are the slides in case anyone
is interested (the talk included visualizations of iptables log data
from the Honeynet Scan34 challenge):

http://www.cipherdyne.org/talks/Michael_Rash_OSCON_2007.pdf

Here is a blog post with a couple of the graphs visible:

http://www.cipherdyne.org/blog/2007/07/oscon-2007-talk-slides-iptables-attack-visualization.html

Here is the psad-2.0.8 ChangeLog (many thanks to all who have contributed):

http://trac.cipherdyne.org/trac/psad/browser/psad/tags/psad-2.0.8/ChangeLog

--
Michael Rash
http://www.cipherdyne.org/
Key fingerprint = 53EA 13EA 472E 3771 894F AC69 95D8 5D6B A742 839F

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]