Giter Club home page Giter Club logo

log-monitor's Introduction

Log Monitor

Whatches the Snort IDS log files and pops up GTK alerts is something is fishy.

Usage

Install the requirements: Snort IDS, Ruby, RubyGems, rubyGTK and libnotify:

$ apt-get install snort
$ apt-get install ruby rubygems
$ apt-get install libinotify-ruby libgtk2-ruby libnotify-dev
$ gem install libnotify

Run the unittests:

$ ruby unittest/ts_allTheTests.rb

And run the program:

$ ruby main.rb

Notes

This code has not been updates since May 2011 and it is less likely that it will ever be.

A python port exists on the porting-python branch.

Tested under Debian 6.0 clean install with latest updates.

License

Copyright Stefan Fodor @ 2011

This program is free under the terms of GNU GPL licence.

Feel free to copy, modify and redistribute.

log-monitor's People

Stargazers

avatar

Watchers

avatar avatar

log-monitor's Issues

Fix various issues

small but annoying bugs/concept flaws

  • what happens when you have to many entries?
  • rewrite the part of getting snort classification
  • Fix priority bug in regexp
  • Fix display if no clasif

permissions

In the readme you suggest changing the permissions of the log file. An alternate solution is to include the user that should be able to read the file in the 'adm' group.

Rewrite the file tailling

It was wrongly assumed that every snort log entry is consisting of 7 lines...
wrong....

Idea: use file seeking for a specific id

Replace Inotify

Inotify is not ported as I would expect on Ruby. It may help using the classical while loop

Unable to run program

How do you run the program?

I have followed the readme (besides the snort part) and the unittests are running.

How to start it?

I did
$ ruby main.rb
i am main! Obey me!
In the class, other file
Hello GUI
./GUI.rb:19:in power_on_self_test': undefined methodtoday' for Date:Class (NoMethodError)
from ./Watcher.rb:40:in `power_on_self_test'
from main.rb:7

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.