About:
IDABench is a Web interface to many intrusion analysis tools. By the use of simple plug-ins, it allows an analyst to twist and turn hourly packet logs through such utilities as tcpdump, ngrep, tethereal, etc. Output is textual web pages, gnuplot graphs, and downloadable composite binary dumpfiles. Based on the US Navy's SHADOW intrusion detection system, IDABench simplifies the writing of tcpdump filters, allows regular- expression context matching, and through a simple plugin API, can be extended to include other libpcap- based analysis tools, such as Snort, p0f, etc.

Author:
George Bakos [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
(not rated)

Homepage:
http://idabench.ists.dartmouth.edu
Tar/GZ:
http://idabench.ists.dartmouth.edu/download/idabench-1.0.tar.gz

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Environment]		Web Environment
[Intended Audience]		System Administrators
[License]		Public Domain
[Operating System]		Unix
[Programming Language]		Perl
[Topic]		Security

Dependencies: [change]
Apache (required)
Perl 5.6.1 (required)
gnuplot (recommended)
ngrep (recommended)
Wireshark (recommended)
[download links]

 Branches

Branch	Version	Last release	License	URLs
Default	1.0	04-Jul-2003	Public Domain