[] PortscanGeoinfo (Prelude Correlator Plugin) by David Rupprechter
Download ::: md5 checksum

:: release date: 2010-11-06
:: license: GPLv2

PortscanGeoinfo is a plugin for Prelude Correlator which is a sensor of the impressing Prelude security information event management system

PortscanGeoinfo creates correlation alarms with geographical information for portscans detected by the NIDS Snort and the HIDS OSSEC
Please note that Snort and/or OSSEC must be registered as a Prelude sensor


Please install GeoIP for python. For detailled geographical information please download MaxMind´s GeoLiteCity-Database

Please have a look at the README-file in the archive for installation notes!


Valid HTML 4.01 Transitional