Changes between Version 88 and Version 89 of waue

Timestamp:

Aug 6, 2008, 5:34:33 PM (16 years ago)

Author:

waue

Comment:

--

waue

@@ -17 +17 @@
 var HOME_NET any
 var EXTERNAL_NET !$HOME_NET
-
 }}}
 
 2. 紀錄警訊
 
+> $ sudo snort -c /etc/snort/snort.conf -i eth0
+
+> $ sudo tcpreplay -i eth0 --topspeed /home/waue/sp1.tcpdump
+
+3. 分析格式、載入雲端
+
+ * 用一般java application  於 local 運行 SnortParser.java 
+   * 修改main的輸入輸出參數
 {{{
-
- $ sudo snort -c /etc/snort/snort.conf -i eth0
-
- $ sudo tcpreplay -i eth0 --topspeed sp1.tcpdump
-
+                String in = new String("/home/waue/Desktop/alert_flex.txt");
+                String ou = new String("/home/waue/Desktop/alert_flex_parsed.txt");
 }}}
 
-3. 分析格式
+ * 載入雲端
 
-{{{
+> $ cd /dir/hadoop
 
-}}}
+> $ bin/hadoop dfs -put snort-log/ snort-log/
 
 4. 紀錄雲端運算時間