Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

POE::Filter::Snort parses streams containing Snort alerts. Each alert is returned as a hash containing the following fields: comment, class, priority, src_ip, dst_ip, src_port, dst_port, xref, raw. Great for monitoring Snort logs.

branch: master

Fetching latest commit…

Octocat-spinner-32-eaf2f5

Cannot retrieve the latest commit at this time

Octocat-spinner-32 t
Octocat-spinner-32 MANIFEST
Octocat-spinner-32 Makefile.PL
Octocat-spinner-32 README
Octocat-spinner-32 Snort.pm
Octocat-spinner-32 TODO
README
--------
Abstract
--------

POE::Filter::Snort is a stream filter for POE.  It parses snort alert
logs into hashes, one per alert.  Each hash's fields contain vital
information about its parsed alert.

It's used the way any other POE::Filter class would be.  See the
SYNOPSIS for a complete working example.

------------------
Basic Installation
------------------

POE::Filter::Snort may be installed through the CPAN shell in the
usual manner.  Typically:

  $ perl -MCPAN -e 'install "POE::Filter::Snort"'

You can also read this README from the CPAN shell:

  $ perl -MCPAN -e shell
  cpan> readme POE::Filter::Snort

And you can install the component from the CPAN prompt as well:

  cpan> install POE::Filter::Snort

-------------------
Manual Installation
-------------------

This module may be installed manually, in the usual fashion:

1. Download and unpack the distribution.

	Left as an exercise for the reader.

2. Build and test it.

  % perl Makefile.PL
	...
  % make test
	...

3. Install it if you're happy.  It's assumed you have privileges to
create and write files in Perl's library.

	% make install

It should now be ready to use.

-------------
Bleeding Edge
-------------

This module is maintained in two public git repositories.  Patches and
collaborators are welcome.

	http://github.com/rcaputo/poe-filter-snort
	http://gitorious.org/poe-filter-snort

Thanks for reading!

-- Rocco Caputo - http://poe.perl.org/
Something went wrong with that request. Please try again.