portscangeoinfo

We have hosted the application portscangeoinfo in order to run this application in our online workstations with Wine or directly.

Quick description about portscangeoinfo:

PortscanGeoinfo is a plugin for the powerful Prelude correlation engine. This plugin correlates alerts from Snort NIDS and OSSEC HIDS sensors regarding portscans. Geographical information (GeoIP) is included in the correlated alert.

Features:

• GeoIP lookup
• correlation of IDMEF events (prelude-correlator)
• correlation of portscans

Audience: Advanced End Users, System Administrators.

Programming Language: Python.

.