blob: 1ad915b6fa4838901f610ff6e74db3ecc0b35841 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
ACID is a PHP-based analysis engine to search and process a database of
security incidents generated by the NDIS Snort. The features currently
include:
- Search interface for finding alerts matching practically any criteria.
This includes arrival time, signature time, source/dest address/port,
flags, payload, etc. Furthermore, these queries can be made arbitrarily
complex to satsify almost any parameters.
- Statistics:
- % of traffic for each protocol
- Alerts: # of src/dst IP, last/first arrival time
- Graph # of arrived alert over a period of time
- last x-number of alerts by protocol
- All features are provided in real-time
WWW: http://www.cert.org/kb/acid/
|
