grsecurity snortparse v1.0 (c) 2001 Brad Spengler

Here's my attempt at what i feel is a very useful snort logfile parser.
I got tired of all the other perl parsers that require obscure modules,
are incredibly slow, and don't give me the features I want.

Features:
 * sorting by any criteria
 * quick links to attack descriptions
 * nslookup, ip whois, domain whois, raw logs...all in one click
 * performs lookup of reverse dns as verification
 * incredibly fast
 * all code is internal and written in c...no need for external 
   applications or perl modules


Requirements:
 * snort 1.8.x (http://www.snort.org)
 * snort rules (http://www.snort.org)

Installation:
 * run "make" in the source directory.  Copy *.cgi to the directory
   you want to run the program from.

Note:
 * try to run snort as the same user as apache to avoid problems with log
   permissions...or run the cgi as the snort user...one or the other.

I spent several hours writing this...I personally find it very useful and
will use it myself.  Enjoy!

-Brad



