'snort' Category

• NSM-Console version 0.6 release

  March 14, 2008

  I’m happy to announce the release of the next version of NSM-Console. Version 0.6. If you are unfamiliar with NSM-Console, here’s the synopsis from the project page: NSM-Console (Network Security Monitoring Console) is a framework for performing analysis on packet capture files. It implements a modular structure to allow for an analyst to quickly write […]

  posted in bro-ids, clamscan, dump, foremost, gzip, harimau, monitoring, network, nsm, nsm console, packet, pcap, security, snort, trace-summary, whitepaper by Lee

• Create a passive network tap for your home network

  February 22, 2008

  In my home network, I have a passive tap sitting between my cable modem and my router, instead of spending tons of money, I made my own. They’re surprisingly simple to make, and also extremely simple to use. Let’s start with the wiring, at a local electronics store, I purchased 4 RJ-45 wiring plugs, I […]

  posted in bridge, freebsd, ids, network, nsm, passive, snort, tap by Lee

• NSM-Console version 0.5 release

  February 5, 2008

  That’s right, no development release this time around. I’ve been trying to get version 0.5 all finished for the Hex 1.0.3 release, and I’m happy to present the newest NSM-Console release! Firstly, you can download NSM-Console version 0.5 here: http://writequit.org/projects/nsm-console/files/nsm-console-0.5.tar.gz Mirror here: https://secure.redsphereglobal.com/data/dakrone/files/nsm-console-0.5.tar.gz Like always, let’s go over some of the new features in this […]

  posted in bro-ids, checkip, flowtime, framework, harimau, hex, monitoring, network, nsm, nsm console, ruby, script, security, snort by Lee

• Development version of nsm-console (0.3-DEVEL)

  January 1, 2008

  I just pushed out a newer development version of nsm-console out to navi.eight7.org, here are some of the new features: Snort module with community rules self-contained snort module will all the community rules and configuration file, this’ll generate alerts into a file after reading the pcap file. I wasn’t sure whether to use community or […]

  posted in automation, development, hex, logfile, nsm, nsm console, programming, ruby, script, snort by Lee

• NSM Console projected module list

  November 28, 2007

  Here’s a list of all the planned modules and completed (struck-out) modules for nsm-console: (if a module is struck out, it’s because I’ve finished making a module for it, it isn’t necessarily in the tarball for download) aimsnarf ngrep (gif/jpg/pdf/exe/pe/ne/elf/3pg/torrent) tcpxtract tcpflow chaosreader bro-IDS snort tcpdstat capinfos tshark argus ragator racount rahosts hash (md5 & […]

  posted in aimsnarf, argus, bro-ids, capinfos, chaosreader, console, flowtag, flowtime, harimau, hash, honeysnap, md5, module, ngrep, nsm, p0f, ra, racount, ragator, rahosts, ruby, script, sha256, snort, tcpdstat, tcpflow, tcpxtract, tshark by Lee