http://www.ossim.net/dokuwiki/ 2008-08-11T17:13:48+01:00 http://www.ossim.net/dokuwiki/ http://www.ossim.net/dokuwiki/lib/images/favicon.ico text/html 2008-08-11T17:07:28+01:00 Alberto Roman Linacero (alberto@80.58.205.56) http://www.ossim.net/dokuwiki/doku.php?id=architecture:plugin_writing&do=diff1218474448 We will focus on the steps needed to create an OSSIM plugin. This will be a simple plugin that you can trigger using a small python script that sends a message to syslog. This process can be used to verify that the agent and server are functioning a... text/html 2008-08-11T17:04:47+01:00 Alberto Roman Linacero (alberto@80.58.205.56) http://www.ossim.net/dokuwiki/doku.php?id=documentation:serverd&do=diff1218474287 ossim-server is a daemon which executes further processing tasks in OSSIM. It usually runs in the background and connects with the database to retrieve and enter data from agents as well as from frameworkd. It is also currently connected with the we... text/html 2008-07-01T18:49:16+01:00 Rob Walsh (outlawdrake@209.130.177.141) http://www.ossim.net/dokuwiki/doku.php?id=installation:debian&do=diff1214938156 Please, feel free to post any comment about the install process in the user contributed section. We will update the manual with your feedback. Thanks. OSSIM Install Guide for Debian GNU/Linux 0. Before installing OSSIM 0.1 Installing Debian GNU... text/html 2008-06-24T09:17:22+01:00 David Gil (dgil@80.38.114.98) http://www.ossim.net/dokuwiki/doku.php?id=installation:pnp4nagios-debian&do=diff1214299042 PNP is an addon to nagios which analyzes performance data provided by plugins and stores them automatically into RRD-databases. PNP isn’t available as an official debian package yet, but you can find preliminar packages here. Configuratio... text/html 2008-06-05T12:05:41+01:00 Jay Pipers (pipers@212.8.105.101) http://www.ossim.net/dokuwiki/doku.php?id=docossim:gd_introduction_es&do=diff1212667541 Traducciones : en 2. Introducción OSSIM es la abreviatura de Open Source Security Information Management System (Sistema de gestión de seguridad de información Open Source) e integra más de 15 programas de seguridad Open Source proveyendo la tecn... text/html 2008-06-05T10:34:07+01:00 Alberto Roman Linacero (alberto@80.58.205.56) http://www.ossim.net/dokuwiki/doku.php?id=start&do=diff1212662047 Welcome and wiki usage rules FAQ FAQ Internationalization FAQ Installation Instructions OSSIM ISO User Guide OSSIM ISO Known Bugs Debian Gentoo Using OSSIM User Manual Executive Panel OSSIM Description General Description Mana... text/html 2008-06-05T10:33:02+01:00 Alberto Roman Linacero (alberto@80.58.205.56) http://www.ossim.net/dokuwiki/doku.php?id=up_to_date_roadmap&do=diff1212661982 The following list of features / fixed is due to be implemented before releasing 1.0. Those finished and tested get deleted. If you want to contribute to OSSIM developing something, we would prefer that you take the features with a ““. ... text/html 2008-03-26T17:17:41+01:00 Juan Manuel Lorenzo (juanma@80.58.205.102) http://www.ossim.net/dokuwiki/doku.php?id=ideas&do=diff1206551861 First of all, thank you for your interest in OSSIM and what is more important, in improving it . This is our first take at Google Summer of Code which looks like a great opportunity for enthusiast students to get hands-on experience in real world ... text/html 2008-02-24T13:22:15+01:00 Alberto Roman Linacero (alberto@81.33.176.160) http://www.ossim.net/dokuwiki/doku.php?id=ossim_installer:known_bugs&do=diff1203859335 No known bugs at this time AlienVault OSSIM Installer ISO v1.03 known bugs You’ll need to change, in the file /etc/snort/spade.ossim.conf, the line that says “dest=alert” with “dest=both” to let spade log in unified format. The line inside... text/html 2008-02-24T13:17:53+01:00 Alberto Roman Linacero (alberto@81.33.176.160) http://www.ossim.net/dokuwiki/doku.php?id=ossim_installer:updater&do=diff1203859073 Please refer to the original release note published on 2008/02/22. This section is being worked on. ... text/html 2008-02-20T19:14:42+01:00 Alberto Roman Linacero (alberto@80.37.205.142) http://www.ossim.net/dokuwiki/doku.php?id=faq&do=diff1203534882 According to Wikipedia: “Security Information Management (SIM) is the industry-specific term in computer security referring to the collection of data (typically log files; e.g. event logs) into a central repository for trend analysis. Due to histori... text/html 2008-02-04T16:04:01+01:00 Alberto Roman Linacero (alberto@80.37.205.142) http://www.ossim.net/dokuwiki/doku.php?id=ossim_installer:user_guide&do=diff1202141041 The OSSIM Installer ISO will ask you a series of questions after starting: Country Timezone Keyboard Layout (optional) Main interface, if more than one available. Root password Selected interface IP, mask, GW and DNS. Future version will al... text/html 2008-02-01T13:04:22+01:00 Alberto Roman Linacero (alberto@80.37.205.142) http://www.ossim.net/dokuwiki/doku.php?id=user_manual:dashboard&do=diff1201871062 The OSSIM Executive Panel is the de facto starting point of the OSSIM application. Once you log in to OSSIM, the Executive Panel appears, as indicated in Figure 2 – Dashboard > Executive Panel. Figure 2 – Dashboard > Executive P... text/html 2008-02-01T12:35:56+01:00 Alberto Roman Linacero (alberto@80.37.205.142) http://www.ossim.net/dokuwiki/doku.php?id=user_manual:policy&do=diff1201869356 A great deal of ossim’s behaviour is configured through this section. Assets should be defined (both at host and at network level), IPS actions and responses can be configured and ports, sensors, servers and plugin groups need to be defined fo... text/html 2008-02-01T09:57:31+01:00 Alberto Roman Linacero (alberto@80.37.205.142) http://www.ossim.net/dokuwiki/doku.php?id=installation:source&do=diff1201859851 As OSSIM is not anymore released to be installed via source files, this documentation is highly unmaintained This guide will guide you on how to install OSSIM from sources. Some of the dependencies are patched to work with Ossim, the ones which... text/html 2008-01-25T16:54:23+01:00 Alberto Roman Linacero (alberto@80.37.205.142) http://www.ossim.net/dokuwiki/doku.php?id=documentation:technical_description&do=diff1201280063 — Alberto Roman Linacero 2008/01/25 16:54 ... text/html 2008-01-16T22:46:12+01:00 Dominique Karg (dk@89.6.126.121) http://www.ossim.net/dokuwiki/doku.php?id=user_manual:reports&do=diff1200523572 The Report tab displays the Host Report page by default, as shown in Figure 15 – Reports > Host Report Index. Figure 15 – Reports > Host Report Index There are four different types of reports available from the Report Index, in... text/html 2008-01-03T12:51:55+01:00 kinzsize (kinz@213.245.32.155) http://www.ossim.net/dokuwiki/doku.php?id=third_party:francais:configuration&do=diff1199364715 regardez cette partie pour l’ajout de graphiques dans le control panel>executive panel http://www.ossim.net/dokuwiki/doku.php?id=usingwww:executive_panel Configuration de NTOP Pour configurer l’interface de NTOP nano /var/lib/nto... text/html 2008-01-02T14:25:02+01:00 kinzsize (kinz@213.245.32.155) http://www.ossim.net/dokuwiki/doku.php?id=third_party:francais:installation_de_debian&do=diff1199283902 Pour installer Debian GNU/Linux system choisissez la version d’installation par le réseau qui est en faite une debian minimale de 135 à 175 Mo. Vous pouvez la trouvez ici :Etch Debian Installer. Suivez l’installation de base de debian. ... text/html 2007-12-31T14:16:50+01:00 kinzsize (kinz@213.245.32.155) http://www.ossim.net/dokuwiki/doku.php?id=third_party:francais&do=diff1199110610 Topics Fonctionnement logiciel Les applications Ossim-server et Ossim-agent Fonctionnement de l'architecture avec une sonde Snort Fonctionnement de l'architecture avec une sonde Ntop Fonctionnement de l'architecture avec une sonde P0f Foncti...