|
Posted by Georg Dingler on August 10, 2004, 5:46 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I've been using snort for many years. Although there is database and
..csv support for snort I do like many others - the standard output in
the *.ids files is good enough. But the standard output cannot be read
into a database like MS Access for analyzing purposes. In order to
achieve this goal I wrote a little Freeware tool in C# for converting
the .ids standard output into a .csv structure that can be easily read
with a database like MS Access.
Examples on Athlon 2200, 1 GB RAM:
- 50.000 Alerts are converted in 2 seconds (without -v option)
- 2,5 Mio. Alerts are converted in a few minutes (with verbose output)
Download at:
http://www.dingler-it.de/content/software/sln/dingler_it_sln.htm
--
Georg
www.dingler-it.de
| 
XML site map