Get snort events from a MySQL database. Module data module_begin module_name IDS_WEBAPP_Attack module_description SNORT total events for category ‘web-application-attack’ module_type generic_data_inc module_exec echo “select COUNT(sig_id) from...
This plugin returns 10 parameters from Netfilter / Linux firewall module (using iptables): Conntrack Active Entries, Conntrack New, Conntrack Invalid, fw_con_established, fw_con_timewait, fw_con_syn_wait, fw_con_fin_wait, fw_con_unreplied, fw_enabled This is an agent...
