OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Server resources usage Policy report format from IDS

From: bugzbee (bugzbee2gmail.com)
Date: Fri Oct 19 2007 - 09:18:00 CDT


Hi list,
I have been assigned a task to write a plug-in for an IDS, which should
be capable to report maximum information about the usage of the
web-server(or web-site) resources.
HTTP requests( HTTP methods/URI/Path/Files accessed/???),
Query parameters & values, Message body in case of POST request.,
Source IP,
Host Header,
User-Agent Header, etc
Though the report should contain all information the each user/ip
accessed that perticular site, it should be small to process on &
extract the information.

ne hints / suggestions welcome.

~~Thanks in advance.

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------