SnortsamStat [Java]

Title: SnortsamStat
Version: 0.1
License: GNU
Requirements: Linux/Unix
Code: Java

This SnortsamStat is used to produce stats for MRTG based on the logfiles SnortSam produce.
When using Snort with snortsam, it will produce some blocks and bans and this will be fetched from the log (alerts, counts).
This is not made with performance in mind, just to fetch out the data needed for MRTG to produce nice graphs.

Needed
snort.sh file at the same place as the SnortsamStat.class
It will use the file to access db for the alerts.

How to run
Example: java SnortsamsStat /var/log/snortsam.log

An mrtg.cfg could look like this:

Target[localhost.snort]: `cd /root/mrtg/; java SnortsamStat /var/log/snortsam.log`
MaxBytes[localhost.snort]: 100
Title[localhost.snort]: Snort
PageTop[localhost.snort]: <H1>Snort</H1>
YLegend[localhost.snort]: Alerts (min)
LegendI[localhost.snort]: Alerts (min)
LegendO[localhost.snort]: Blocked Hosts
Legend1[localhost.snort]: Incoming Alerts
Legend2[localhost.snort]: Blocked Hosts
Options[localhost.snort]: nopercent,growright,gauge
ShortLegend[localhost.snort]: &nbsp;hits

Download: Snortsam MRTG (399 hits)

Leave a Reply