[Snort-users] Is there such a thing as a morning after IDS?

Jacob, Raymond A Jr raymond.jacob at ...7622...
Sat May 8 11:55:02 EDT 2004


I am looking for a tool that will report the number of attacks the associated source ip addresses and destination network addresses that occurred on the previous day.

 Number of attacks     | Signature | Source IP | Source port | Destination IP | Destination Port
-----------------------+------------------------------------------------------------------------
      128              | P2P       |172.16.82.3| 443         | 127.0.0.1      | 443
    ... 

------------------------------------------------------------------------------------------------
    1400               |Grand Total



 Number of attacks     | Signature | Source IP | Source port | Destination IP | Destination Port
-----------------------+------------------------------------------------------------------------
      128              | Web Traver|192.99.32.7|445         | 128.23.45.8    | 80
    ... 

------------------------------------------------------------------------------------------------
    15000              |Grand Total




More information about the Snort-users mailing list