-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

The current deficiency in the existing web front end is that it does not
access data from the database but instead parses log files.  This means
that every time you query that data you have to parse the entire file.
Utilizing a database is much more efficient for such reporting.  In a
previous life I was a web application developer and so I started writing
our new code from a traditional MVC model so that it could incorportate
any back end you wanted.  I think the existing WUI was designed to
present OSSEC data via the web rather than provide a querying interface.

Justin C. Klein Keane

Sr. Information Security Specialist
Information Security and Unix Systems
University of Pennsylvania
School of Arts and Sciences
3600 Market St.
Room 527
Philadelphia, PA 19104
215.898.0236(p)
215.573.3166(f)

Dimitri Yioulos wrote:
> Agreed.
> 
> On Wednesday 25 June 2008 4:05 pm, Herb Steck wrote:
>> MySQL.
>>
>> But there is already a web interface, so why not work off of that and make
>> it better?
>>
>> -----Original Message-----
>> From: [email protected] [mailto:[EMAIL PROTECTED] On
>> Behalf Of Adriel Desautels
>> Sent: Wednesday, June 25, 2008 3:00 PM
>> To: [email protected]
>> Subject: [ossec-list] Re: OSSEC Web Interface
>>
>> I don't see why not. I'm not much of a developer myself, so I'd most
>> probably need some help heading this off. First I need to understand how
>> OSSEC interfaces with what database. Anyone know?
>>
>> Regards,
>>      Adriel T. Desautels
>>      Chief Technology Officer
>>      Netragard, LLC.
>>      Office : 617-934-0269
>>      Mobile : 617-633-3821
>>      http://www.linkedin.com/pub/1/118/a45
>>
>>      Join the Netragard, LLC. Linked In Group:
>>      http://www.linkedin.com/e/gis/48683/0B98E1705142
>>
>> ---------------------------------------------------------------
>> Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
>> Penetration Testing, Vulnerability Assessments, Website Security
>>
>> Netragard Whitepaper Downloads:
>> -------------------------------
>> Choosing the right provider : http://tinyurl.com/2ahk3j Three Things you
>> must know  : http://tinyurl.com/26pjsn
>>
>> Derek J. Morris wrote:
>>> That would be great, are you going to make it open to the ossec
>>> community?
>>>
>>> -Derek
>>>
>>>> Greetings,
>>>>    I am interested in possibly creating a new OSSEC web interface. What
>>>>
>>>> sort of back-end database does OSSEC use today? I thought it was
>>>> mysql, but I think I'm wrong.
>>>>
>>>> Regards,
>>>>    Adriel T. Desautels
>>>>    Chief Technology Officer
>>>>    Netragard, LLC.
>>>>    Office : 617-934-0269
>>>>    Mobile : 617-633-3821
>>>>    http://www.linkedin.com/pub/1/118/a45
>>>>
>>>>    Join the Netragard, LLC. Linked In Group:
>>>>    http://www.linkedin.com/e/gis/48683/0B98E1705142
>>>>
>>>> ---------------------------------------------------------------
>>>> Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
>>>> Penetration Testing, Vulnerability Assessments, Website Security
>>>>
>>>> Netragard Whitepaper Downloads:
>>>> -------------------------------
>>>> Choosing the right provider : http://tinyurl.com/2ahk3j Three Things
>>>> you must know  : http://tinyurl.com/26pjsn
>>> - Derek
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIY6crR4a3EW2yjlQRAue8AJ99bNJwc8bnx5OeFeUgLaCWVowP4wCfTrii
3/yOAuBw7qWQOIJQOR6Wp7k=
=4c/2
-----END PGP SIGNATURE-----

Reply via email to