Snort Report
Snort Report is an add-on module for the Snort Intrusion Detection System. It provides realtime reporting from the MySQL database generated by Snort. It requires a platform with MySQL 3.23, PHP 4.0, and Snort 1.8. It has been tested on Redhat 6.2, 7.0, 7.1, and OpenBSD 2.9.
| Tags | Internet Log Analysis Security Networking Monitoring |
|---|---|
| Licenses | GPL |
Recent releases
- 21 Dec 2005 22:50
Changes: Cosmetic changes in the logo and graphs, a fix for the port scan display in the graph, a fix for a minor bug when using performance profiling, and fixed HTML links to snort.org signatures.
- 12 Sep 2005 03:15
Changes: Lots of changes (and versions) were made since the last announcement. Globals are not required in PHP anymore. This version should work with the latest versions of Apache, PHP, jpgraph, gd, etc.
- 20 Aug 2001 14:56
Changes: This release includes general code optimization, including cleaning up various PHP warnings, some input validation, faster sorting, and switching to UNIX timestamp. Reference links have been added to signature and port databases (Arachnids, CVE, BUGTRAQ, etc.). A database abstraction layer has been added.
- All comments
Recent commentsGreat, but one complaint
The thing I like best about this piece of software is that it doesn't have anywhere the number of dependencies as something like ACID. Very easy to set up. Just make sure you use the included .sql file to create indexes in the snort database or it'll be slow as hell. :)
My main gripe is that it totally broke when I turned off register_globals in my php.ini. :/ Now I have to go through the code and fix it.