Sophie

Sophie

distrib > Mandriva > 2010.0 > x86_64 > by-pkgid > 7cca339842e279e7221d36d9f3046f0b

argus-clients-2.0.6.fixes.1-5mdv2009.0.x86_64.rpm

Description:

Clients to the argus probe which process and display information.

This version contains raprelude 0.3.1 from
<http://www.intrusion-lab.net/raprelude/>.

raprelude is a client to log network events to a prelude manager. For
this task you would use argus to log all information of network
connections in your network. Then you can make use of any argus client
to select the network traffic you are interested in. For example you
use the ra client to select just the connections to a certain server
you are examining. raprelude uses a configuration file with rules to
determine which alerts to log and with wich class name. That way ICMP
traffic can be classified as ICMP traffic, some other traffic records
can be dropped and again other records might be logged with more
detailed information than others. This way raprelude enables you to log
selected traffic information to prelude so you can visualize it
together with the other hostile network events that are detected by
other prelude sensors. Prelude uses IDMEF format to log the events.

Sources packages:

Other version of this rpm: