Snortalog 2.4.3

A powerful Perl script that summarizes Snort logs

  Add it to your Download Basket!

 Add it to your Watch List!

0/5

Rate it!

What's new in Snortalog 2.4.3:

  • Add JUNIPER NetScreen log detection
  • Add TIPPINGPOINT log detection
  • Correct some typos or minor errors in messages or comments
  • Verify CHECK POINT Fw-1 R65 log detection direct from "fw log -n" command
Read full changelog
send us
an update
LICENSE TYPE:
GPL (GNU General Public License) 
USER RATING:
UNRATED
  0.0/5
DEVELOPED BY:
Jeremy Chartier
HOMEPAGE:
jeremy.chartier.free.fr
CATEGORY:
ROOT \ Utilities
2 Snortalog Screenshots:
SnortalogSnortalog
Snortalog is a powerful Perl script that summarizes Snort logs, making it easy to view any network attacks detected by Snort.

It can generate charts in HTML, PDF, and text output. Snortalog works with all versions of Snort, and can analyze logs in three formats: syslog, fast, and full snort alerts.

Moreover, it is able to summarize other logs like CheckPoint Fw-1 (NG and 4.1), Netfilter, IPFilter, Packet Filter, CISCO PIX, and Lucent BRICK in a similar way.

Developer comments

There are several reasons why I choose to develop my program in perl.
I have been working with SNORT for 5 years and I couldn't find any existing scripts that were able to report potentials attacks quickly.

My first goal was to generate a text output (ASCII) to provide many sorting and filtering statistics. Eventually, I improved my program to generate charts (HTML) for a best visualization and soon a GUI.

You may ask why not use a MySQL database or similar like ACID ??? As a member of SNORT's mailing list for a long time ago, I often read questions about this error "Fatal error: Maximum execution time of 180 seconds exceeded".

You can regularly purge your database but this task could prove tough for the administrator. Moreover, in a network with a lot of NIDS and several thousand log alerts, a request in a database will have a long response time.

The use of a script like SnortALog is more easier, efficient and appropriate. Do your own tests and send me your feedback.

Last updated on March 30th, 2011

feature list requirements

#network attacks #view network attacks #Snort logs viewer #Snortalog #Snort #logs #viewer

Add your review!

SUBMIT