IDS mailing list archives

Server resources usage Policy report format from IDS


From: bugzbee <bugzbee2 () gmail com>
Date: Fri, 19 Oct 2007 19:48:00 +0530

Hi list,
I have been assigned a task to write a plug-in for an IDS, which should
be capable to report maximum information about the usage of the
web-server(or web-site) resources.  
HTTP requests( HTTP methods/URI/Path/Files accessed/???), 
Query parameters & values, Message body in case of POST request.,
Source IP,
Host Header,
User-Agent Header, etc
Though the report should contain all information @ the each user/ip
accessed that perticular  site, it should be small to process on &
extract the information. 

ne hints / suggestions welcome. 

~~Thanks in advance.


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: