发烧:适用于Suricata的EVE-JSON格式的快速,可扩展,多功能事件路由器-源码

上传者: 42177768 | 上传时间: 2021-02-04 18:14:03 | 文件大小: 141KB | 文件类型: ZIP
:fire: 发热 快速,可扩展,多功能事件路由器(FEVER)是一种用于快速处理Suricata的JSON EVE输出中的事件的工具。 “处理”的含义是由许多模块化组件定义的,例如,便于快速提取到数据库中。 其他处理器实现各种元数据(例如,聚合流和原始流,被动DNS数据等)以及性能指标的收集,聚合和转发。 它打算在Logstash之类的通用日志处理器之前使用(或代替它使用),以增加在看到大量流量的传感器上观察到的事件吞吐量。 建造 像其他任何好的Go程序一样: $ go get -t ./... $ go build ./... $ go install -v ./... ... $ fever

文件下载

资源详情

[{"title":"( 96 个子文件 141KB ) 发烧:适用于Suricata的EVE-JSON格式的快速,可扩展,多功能事件路由器-源码","children":[{"title":"fever-master","children":[{"title":".gitignore <span style='color:#111;'> 29B </span>","children":null,"spread":false},{"title":"protoc.sh <span style='color:#111;'> 833B </span>","children":null,"spread":false},{"title":"processing","children":[{"title":"flow_profiler.go <span style='color:#111;'> 3.87KB </span>","children":null,"spread":false},{"title":"dns_aggregator.go <span style='color:#111;'> 6.01KB </span>","children":null,"spread":false},{"title":"context_collector_test.go <span style='color:#111;'> 2.61KB </span>","children":null,"spread":false},{"title":"bloom_handler.go <span style='color:#111;'> 8.58KB </span>","children":null,"spread":false},{"title":"unicorn_aggregator.go <span style='color:#111;'> 5.60KB </span>","children":null,"spread":false},{"title":"event_profiler.go <span style='color:#111;'> 3.94KB </span>","children":null,"spread":false},{"title":"handler_dispatcher.go <span style='color:#111;'> 4.32KB </span>","children":null,"spread":false},{"title":"forward_handler.go <span style='color:#111;'> 7.95KB </span>","children":null,"spread":false},{"title":"dns_aggregator_test.go <span style='color:#111;'> 3.65KB </span>","children":null,"spread":false},{"title":"rdns_handler_test.go <span style='color:#111;'> 2.27KB </span>","children":null,"spread":false},{"title":"heartbeat_injector.go <span style='color:#111;'> 3.17KB </span>","children":null,"spread":false},{"title":"flow_aggregator_test.go <span style='color:#111;'> 6.28KB </span>","children":null,"spread":false},{"title":"pdns_collector.go <span style='color:#111;'> 6.79KB </span>","children":null,"spread":false},{"title":"context_shipper_amqp.go <span style='color:#111;'> 1.77KB </span>","children":null,"spread":false},{"title":"stenosis_connector.go <span style='color:#111;'> 5.71KB </span>","children":null,"spread":false},{"title":"flow_extractor.go <span style='color:#111;'> 3.68KB </span>","children":null,"spread":false},{"title":"ip_handler.go <span style='color:#111;'> 5.10KB </span>","children":null,"spread":false},{"title":"stenosis_connector_test.go <span style='color:#111;'> 6.67KB </span>","children":null,"spread":false},{"title":"context_shipper_amqp_test.go <span style='color:#111;'> 2.95KB </span>","children":null,"spread":false},{"title":"forward_handler_test.go <span style='color:#111;'> 7.43KB </span>","children":null,"spread":false},{"title":"handler.go <span style='color:#111;'> 912B </span>","children":null,"spread":false},{"title":"rdns_handler.go <span style='color:#111;'> 3.35KB </span>","children":null,"spread":false},{"title":"void_handler.go <span style='color:#111;'> 945B </span>","children":null,"spread":false},{"title":"flow_extractor_test.go <span style='color:#111;'> 5.08KB </span>","children":null,"spread":false},{"title":"unicorn_aggregator_test.go <span style='color:#111;'> 5.94KB </span>","children":null,"spread":false},{"title":"flow_notifier.go <span style='color:#111;'> 938B </span>","children":null,"spread":false},{"title":"context_collector.go <span style='color:#111;'> 5.67KB </span>","children":null,"spread":false},{"title":"flow_aggregator.go <span style='color:#111;'> 5.21KB </span>","children":null,"spread":false},{"title":"handler_dispatcher_test.go <span style='color:#111;'> 4.59KB </span>","children":null,"spread":false},{"title":"ip_handler_test.go <span style='color:#111;'> 6.07KB </span>","children":null,"spread":false},{"title":"bloom_handler_test.go <span style='color:#111;'> 23.62KB </span>","children":null,"spread":false},{"title":"heartbeat_injector_test.go <span style='color:#111;'> 1.59KB </span>","children":null,"spread":false},{"title":"stenosis_connector_aux_test.go <span style='color:#111;'> 3.08KB </span>","children":null,"spread":false},{"title":"flow_profiler_test.go <span style='color:#111;'> 3.92KB </span>","children":null,"spread":false}],"spread":false},{"title":"db","children":[{"title":"slurper_dummy.go <span style='color:#111;'> 441B </span>","children":null,"spread":false},{"title":"slurper_mongodb.go <span style='color:#111;'> 6.74KB </span>","children":null,"spread":false},{"title":"slurper_postgres.go <span style='color:#111;'> 5.36KB </span>","children":null,"spread":false},{"title":"slurper.go <span style='color:#111;'> 431B </span>","children":null,"spread":false},{"title":"sql.go <span style='color:#111;'> 5.16KB </span>","children":null,"spread":false},{"title":"slurper_ejdb.go <span style='color:#111;'> 964B </span>","children":null,"spread":false}],"spread":true},{"title":"LICENSE <span style='color:#111;'> 1.53KB </span>","children":null,"spread":false},{"title":"doc","children":[{"title":"flow-agg.md <span style='color:#111;'> 1.44KB </span>","children":null,"spread":false},{"title":"database.md <span style='color:#111;'> 2.02KB </span>","children":null,"spread":false}],"spread":true},{"title":"stenosis","children":[{"title":"api","children":[{"title":"hateoas.pb.go <span style='color:#111;'> 5.35KB </span>","children":null,"spread":false},{"title":"stenosisservicequery.pb.go <span style='color:#111;'> 11.94KB </span>","children":null,"spread":false},{"title":"stenosisservicequery.proto <span style='color:#111;'> 1.47KB </span>","children":null,"spread":false},{"title":"hateoas.proto <span style='color:#111;'> 724B </span>","children":null,"spread":false}],"spread":true},{"title":"task","children":[{"title":"query.pb.go <span style='color:#111;'> 10.93KB </span>","children":null,"spread":false},{"title":"query.proto <span style='color:#111;'> 1.96KB </span>","children":null,"spread":false}],"spread":true}],"spread":true},{"title":"CHANGELOG.md <span style='color:#111;'> 2.50KB </span>","children":null,"spread":false},{"title":"fever.service <span style='color:#111;'> 323B </span>","children":null,"spread":false},{"title":"util","children":[{"title":"submitter.go <span style='color:#111;'> 360B </span>","children":null,"spread":false},{"title":"performance_stats_encoder.go <span style='color:#111;'> 1.94KB </span>","children":null,"spread":false},{"title":"hostnamer_rdns_test.go <span style='color:#111;'> 1.02KB </span>","children":null,"spread":false},{"title":"util_test.go <span style='color:#111;'> 4.04KB </span>","children":null,"spread":false},{"title":"submitter_test.go <span style='color:#111;'> 3.78KB </span>","children":null,"spread":false},{"title":"testdata","children":[{"title":"jsonparse_eve_empty.json <span style='color:#111;'> 0B </span>","children":null,"spread":false},{"title":"jsonparse_eve.json <span style='color:#111;'> 1.32KB </span>","children":null,"spread":false},{"title":"jsonparse_eve_broken1.json <span style='color:#111;'> 731B </span>","children":null,"spread":false}],"spread":false},{"title":"alertifier_test.go <span style='color:#111;'> 5.16KB </span>","children":null,"spread":false},{"title":"util.go <span style='color:#111;'> 7.94KB </span>","children":null,"spread":false},{"title":"eventfilter_test.go <span style='color:#111;'> 1.11KB </span>","children":null,"spread":false},{"title":"consumer.go <span style='color:#111;'> 4.73KB </span>","children":null,"spread":false},{"title":"alertifier.go <span style='color:#111;'> 5.38KB </span>","children":null,"spread":false},{"title":"alertifier_providers.go <span style='color:#111;'> 2.16KB </span>","children":null,"spread":false},{"title":"eventfilter.go <span style='color:#111;'> 1.17KB </span>","children":null,"spread":false},{"title":"submitter_amqp.go <span style='color:#111;'> 6.72KB </span>","children":null,"spread":false},{"title":"hostnamer.go <span style='color:#111;'> 220B </span>","children":null,"spread":false},{"title":"submitter_dummy.go <span style='color:#111;'> 1.68KB </span>","children":null,"spread":false},{"title":"performance_stats_encoder_test.go <span style='color:#111;'> 3.75KB </span>","children":null,"spread":false},{"title":"hostnamer_rdns.go <span style='color:#111;'> 1.18KB </span>","children":null,"spread":false}],"spread":false},{"title":"types","children":[{"title":"flow_event.go <span style='color:#111;'> 5.42KB </span>","children":null,"spread":false},{"title":"flow_event_test.go <span style='color:#111;'> 487B </span>","children":null,"spread":false},{"title":"entry.go <span style='color:#111;'> 963B </span>","children":null,"spread":false},{"title":"eve_test.go <span style='color:#111;'> 1.55KB </span>","children":null,"spread":false},{"title":"eve.go <span style='color:#111;'> 10.47KB </span>","children":null,"spread":false}],"spread":true},{"title":"scripts","children":[{"title":"makelpush <span style='color:#111;'> 194B </span>","children":null,"spread":false}],"spread":true},{"title":"README.md <span style='color:#111;'> 11.59KB </span>","children":null,"spread":false},{"title":"fever.yaml <span style='color:#111;'> 3.87KB </span>","children":null,"spread":false},{"title":"thirdparty","children":[{"title":"google","children":[{"title":"protobuf","children":[{"title":"timestamp.proto <span style='color:#111;'> 6.05KB </span>","children":null,"spread":false}],"spread":false}],"spread":false}],"spread":true},{"title":"input","children":[{"title":"input_stdin.go <span style='color:#111;'> 1.64KB </span>","children":null,"spread":false},{"title":"input.go <span style='color:#111;'> 257B </span>","children":null,"spread":false},{"title":"input_socket.go <span style='color:#111;'> 2.97KB </span>","children":null,"spread":false},{"title":"input_socket_test.go <span style='color:#111;'> 1.52KB </span>","children":null,"spread":false},{"title":"input_redis.go <span style='color:#111;'> 7.45KB </span>","children":null,"spread":false},{"title":"input_redis_test.go <span style='color:#111;'> 5.27KB </span>","children":null,"spread":false}],"spread":false},{"title":".circleci","children":[{"title":"config.yml <span style='color:#111;'> 477B </span>","children":null,"spread":false}],"spread":false},{"title":"cmd","children":[{"title":"fever","children":[{"title":"cmds","children":[{"title":"alertify_test.go <span style='color:#111;'> 1.90KB </span>","children":null,"spread":false},{"title":"testdata","children":[{"title":"alertify_input.json <span style='color:#111;'> 2.14KB </span>","children":null,"spread":false}],"spread":false},{"title":"root.go <span style='color:#111;'> 1.74KB </span>","children":null,"spread":false},{"title":"alertify.go <span style='color:#111;'> 4.70KB </span>","children":null,"spread":false},{"title":"run.go <span style='color:#111;'> 27.71KB </span>","children":null,"spread":false},{"title":"makeman.go <span style='color:#111;'> 766B </span>","children":null,"spread":false}],"spread":false},{"title":"main.go <span style='color:#111;'> 150B </span>","children":null,"spread":false}],"spread":false}],"spread":false}],"spread":false}],"spread":true}]

评论信息

免责申明

【只为小站】的资源来自网友分享,仅供学习研究,请务必在下载后24小时内给予删除,不得用于其他任何用途,否则后果自负。基于互联网的特殊性,【只为小站】 无法对用户传输的作品、信息、内容的权属或合法性、合规性、真实性、科学性、完整权、有效性等进行实质审查;无论 【只为小站】 经营者是否已进行审查,用户均应自行承担因其传输的作品、信息、内容而可能或已经产生的侵权或权属纠纷等法律责任。
本站所有资源不代表本站的观点或立场,基于网友分享,根据中国法律《信息网络传播权保护条例》第二十二条之规定,若资源存在侵权或相关问题请联系本站客服人员,zhiweidada#qq.com,请把#换成@,本站将给予最大的支持与配合,做到及时反馈和处理。关于更多版权及免责申明参见 版权及免责申明