SNORT events (#)

(1 votes, average: 1.00 out of 5)

Loading...

Get snort events from a MySQL database.

Module data

module_begin
module_name IDS_WEBAPP_Attack
module_description SNORT total events for category 'web-application-attack'
module_type generic_data_inc
module_exec echo "select COUNT(sig_id) from signature, event where event.signature = sig_id AND signature.sig_class_id = 4;" | mysql -u snort -ppassword -D snort | tail -1
module_end

module_begin
module_name IDS_Events
module_description SNORT total events
module_type generic_data_inc
module_exec echo "select COUNT(sig_id) from signature" | mysql -u snort -ppassword -D snort | tail -1
module_end