Debian logoDebian Screenshots >

prelude-lml

Security Information Management System [ Log Agent ]

Description

Prelude is a Universal "Security Information Management" (SIM) system. Its goals are performance and modularity. It is divided in two main parts :
 - the Prelude sensors, responsible for generating alerts, such as
   snort sensor, featuring a signature engine, plugins for
   protocol analysis, and intrusion detection plugins, and the Prelude
   log monitoring lackey.
 - the Prelude report server, collecting data from Prelude sensors,
   and generating user-readable reports.

Prelude-LML is a signature based log analyzer monitoring logfile and received syslog messages for suspicious activity. It handle events generated by a large set of components, including but not limited to: Apache, BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nagios, NTsyslog, NuFW, PAM, Portsentry, Postfix, Proftpd, ssh, etc.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload now


Statistics

11 other people were interested in this package here. The newest known version of this software is 1.0.0-5.3+b3 (Information last updated about 13 hours ago.)