idstools 0.2.0

IDS Utility Library

idstools.py is a collection of Python libraries for working with IDS systems (typically Snort and Suricata).

Features

• Snort/Suricata unified2 log file reading.

• Continuous unified2 directory spool reading with bookmarking (a’la Barnyard2).

• Parser and mapping for classification.config.

• Parser and mapping for gen-msg.map and sid-msg.map.

Requirements

• Python 2.6 or 2.7; Python 3.3 works but is not as well tested.

• Currently only tested on Linux.

Documentation

Further documentation is located at http://idstools.readthedocs.org.