Slogger update...
Slogger:
// slogger is such a ridiculously better name then flop. (might wanna re-think that one)
1. setup a wiki for this with password authentication
dev notes:
language of choice atm is C++.
need support for mysql/postgres/sqlite (maybe)
possible solutions: SOCI: http://soci.sourceforge.net/
QT4 (no point doing qt3)
gtkmm (ie. gtk+)
wxwidgets
soci would have the least amount of overhead, unless qtcore comes in handy, soci should be good enough.
Thread support:
Boost libs -- thread supported (untested)
QT4 -- Qthread, tested and used before
gtk/wxwidgets -- supported and untested (overhead)
2. program workflow
snort is setup to log to paranoid log to a text file, logrotate with a delay.
data is read, and writen to DB
data analysis can be parsed, and evetually graphed
3. Todo.
1. DB layout. (what do we need to record? do we care about everything? what to save, what to discard)
2. Graphic tools to generate graphs/grid. php/web component?
gnuplot? imagemagick?

I setup a wiki and ticket
I setup a wiki and ticket system at trac.codestorm.org
Post new comment