On 25-07-2014 03:41, Michael Rash wrote:
On Thu, Jul 24, 2014 at 11:31 AM, hernani <coelho.hern...@sapo.pt
<mailto:coelho.hern...@sapo.pt>> wrote:
*hello,**
**
**i install psad and works fine**
**
**now i wont generate graphs**
**
**i make this command --->* sudo psad --CSV -m /var/log/ufw.log
--CSV-fields "src dst:192.168.1.66 dp" | perl
/home/hernani/Downloads/afterglow/afterglow.pl
<http://afterglow.pl> -c | neato -Tgif -o general.gif
*
**give me this error --->* Use of uninitialized value in
subroutine entry at /usr/lib/perl5/NetAddr/IP/Lite.pm line 1325,
<MSGS> line 3.
Bad arg length for NetAddr::IP::Util::hasbits, length is 0, should
be 128 at /usr/lib/perl5/NetAddr/IP/Lite.pm line 1325, <MSGS> line 3.
This appears to be a bug in psad. I'll get this fixed for the next
release (which will be fairly soon now).
Thanks,
--Mike
*can someone help me??
thanks
hernani
*
hello,
*i update psad-2.2 to psad 2.2.3 and works fine, but now give me no
error in make graphic with this command --->* sudo psad --CSV -m
/var/log/ufw.log --CSV-fields "src: dst:192.168.1.66 dp" | perl
/home/hernani/Downloads/afterglow/afterglow.pl -c | neato -Tgif -o
general.gif
*and give me this *
Afterglow 1.6.4
---------------------------------------------------------------
A program to visualize network activitiy data using graphs.
Uses the dot graph layout program fromt the Graphviz suite.
Input data is expected to be in this simple CSV-style format:
[subject], [predicate], [object]
10.10.10.10, ACCEPT, 216.239.37.99
Usage: afterglow.pl [-adhnstv] [-b lines] [-c conffile] [-e length]
[-f threshold ] [-g threshold] [-l lines] [-o threshold] [-p mode] [-x
color] [-m maxsize]
-a : turn off labelelling of the output graph with the
configuration used
-b lines : number of lines to skip (e.g., 1 for header line)
-c conffile : color config file
-d : print node count
-e length : edge length
-f threshold : source fan out threshold
-g threshold : event fan out threshold (only in three node mode)
-h : this (help) message
-i file : read from input file, instead of from STDIN
-k : output in GDF format instead of DOT
-j : output in GraphSON format instead of DOT
-l lines : the maximum number of lines to read
-m : the maximum size for a node
-n : don't print node labels
-o threshold : omit threshold (minimum count for nodes to be displayed)
Non-connected nodes will be filtered too.
-p mode : split mode for predicate nodes where mode is
0 = only one unique predicate node (default)
1 = one predicate node per unique subject node.
2 = one predicate node per unique target node.
3 = one predicate node per unique source/target node.
-q : suppress all output. Attention! You should use -w to
write output to a file!
-r : print source node names
-s : split subject and object nodes
-t : two node mode (skip over objects)
-v : verbose output
-w file : write output to a file instead of STDOUT
-x : text label color
Example: cat somedata.csv | afterglow.pl -v | dot -Tgif -o somedata.gif
The dot exectutable from the Graphviz suite can be obtained
from the AT&T research website: http://www.graphviz.org
*but i have no graphic*
thanks
hernani
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise?
Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
<mailto:psad-discuss@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/psad-discuss
--
Michael Rash | Founder
http://www.cipherdyne.org/
Key fingerprint = 53EA 13EA 472E 3771 894F AC69 95D8 5D6B A742 839F
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/psad-discuss
