On 25-07-2014 14:38, hernani wrote:
On 25-07-2014 03:41, Michael Rash wrote:
On Thu, Jul 24, 2014 at 11:31 AM, hernani <coelho.hern...@sapo.pt
<mailto:coelho.hern...@sapo.pt>> wrote:
*hello,**
**
**i install psad and works fine**
**
**now i wont generate graphs**
**
**i make this command --->* sudo psad --CSV -m /var/log/ufw.log
--CSV-fields "src dst:192.168.1.66 dp" | perl
/home/hernani/Downloads/afterglow/afterglow.pl
<http://afterglow.pl> -c | neato -Tgif -o general.gif
*
**give me this error --->* Use of uninitialized value in
subroutine entry at /usr/lib/perl5/NetAddr/IP/Lite.pm line 1325,
<MSGS> line 3.
Bad arg length for NetAddr::IP::Util::hasbits, length is 0,
should be 128 at /usr/lib/perl5/NetAddr/IP/Lite.pm line 1325,
<MSGS> line 3.
This appears to be a bug in psad. I'll get this fixed for the next
release (which will be fairly soon now).
Thanks,
--Mike
*can someone help me??
thanks
hernani
*
hello,
*i update psad-2.2 to psad 2.2.3 and works fine, but now give me no
error in make graphic with this command --->* sudo psad --CSV -m
/var/log/ufw.log --CSV-fields "src: dst:192.168.1.66 dp" | perl
/home/hernani/Downloads/afterglow/afterglow.pl -c | neato -Tgif -o
general.gif
*and give me this *
Afterglow 1.6.4
---------------------------------------------------------------
A program to visualize network activitiy data using graphs.
Uses the dot graph layout program fromt the Graphviz suite.
Input data is expected to be in this simple CSV-style format:
[subject], [predicate], [object]
10.10.10.10, ACCEPT, 216.239.37.99
Usage: afterglow.pl [-adhnstv] [-b lines] [-c conffile] [-e length]
[-f threshold ] [-g threshold] [-l lines] [-o threshold] [-p mode] [-x
color] [-m maxsize]
-a : turn off labelelling of the output graph with the
configuration used
-b lines : number of lines to skip (e.g., 1 for header line)
-c conffile : color config file
-d : print node count
-e length : edge length
-f threshold : source fan out threshold
-g threshold : event fan out threshold (only in three node mode)
-h : this (help) message
-i file : read from input file, instead of from STDIN
-k : output in GDF format instead of DOT
-j : output in GraphSON format instead of DOT
-l lines : the maximum number of lines to read
-m : the maximum size for a node
-n : don't print node labels
-o threshold : omit threshold (minimum count for nodes to be displayed)
Non-connected nodes will be filtered too.
-p mode : split mode for predicate nodes where mode is
0 = only one unique predicate node (default)
1 = one predicate node per unique subject node.
2 = one predicate node per unique target node.
3 = one predicate node per unique source/target node.
-q : suppress all output. Attention! You should use -w to
write output to a file!
-r : print source node names
-s : split subject and object nodes
-t : two node mode (skip over objects)
-v : verbose output
-w file : write output to a file instead of STDOUT
-x : text label color
Example: cat somedata.csv | afterglow.pl -v | dot -Tgif -o somedata.gif
The dot exectutable from the Graphviz suite can be obtained
from the AT&T research website: http://www.graphviz.org
*but i have no graphic*
thanks
hernani
*
**i have a new line command**-->* sudo psad -m /var/log/ufw.log "src:
dst:192.168.1.66 dp" | perl
/home/hernani/Downloads/afterglow/afterglow.pl -v | neato -Tgif -o
general.gif
*give me this --->*
[sudo] password for hernani: Verbose mode is on.
Skipping 0 lines.
Reading a maximum of 999999 lines.
Split mode for events is 0.
Threshold 0.
Source Threshold 0.
Target Threshold 0.
Event Threshold 0.
Maximum Node Size 0.2.
No property file specified, using default settings.
*can you tell me what file i must specified?? *
thanks
hernani
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise?
Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
<mailto:psad-discuss@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/psad-discuss
--
Michael Rash | Founder
http://www.cipherdyne.org/
Key fingerprint = 53EA 13EA 472E 3771 894F AC69 95D8 5D6B A742 839F
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/psad-discuss
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/psad-discuss
