summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 60e8a2f)
raw | patch | inline | side by side (parent: 60e8a2f)
author | oetiker <oetiker@a5681a0c-68f1-0310-ab6d-d61299d08faa> | |
Mon, 13 Mar 2006 23:09:14 +0000 (23:09 +0000) | ||
committer | oetiker <oetiker@a5681a0c-68f1-0310-ab6d-d61299d08faa> | |
Mon, 13 Mar 2006 23:09:14 +0000 (23:09 +0000) |
website/rrdworld/index.wml | patch | blob | history | |
website/rrdworld/ourmon.xml | [new file with mode: 0644] | patch | blob |
index a1215f0efa93fecaa11c60e02bd4d0d8610b16f5..e02a35e15e26ab397edd03635e099b71d4dd0224 100644 (file)
#include "monitorix.xml"
#include "munin.xml"
#include "netmrg.xml"
+#include "ourmon.xml"
#include "ow.xml"
#include "ozmonitor.xml"
#include "rrdcgi.xml"
diff --git a/website/rrdworld/ourmon.xml b/website/rrdworld/ourmon.xml
--- /dev/null
@@ -0,0 +1,31 @@
+<rrdworld type="application" >
+
+ <name> Ourmon Networm Monitoring and Anomaly Detection System </name>
+ <author> Jim Binkley </author>
+<description>
+Ourmon is a statistically oriented open-source network monitoring and
+anomaly detection system. It may be regarded as an open source
+equivalent of SNMP RMON II. It is based on promiscuous mode packet
+collection on Ethernet (typically) interfaces. Ourmon does not collect
+all the packets because one principle design goal is to extract signal
+from noise, and not store all the noise in a giant bag under the
+assumption that you can look at it "later" (there is no later).
+Instead it attempts to find important data and summarize it. Data
+is displayed on the web via pictures or reports. Features include
+RRDTOOL graphs built from user-defined BPF expressions, topn flow
+lists, topn ports, topn synning IP hosts, top UDP error makers, top
+scanners, and IRC channels and hosts. Ourmon's anomaly detection
+features include TCP and UDP anomalous hosts, IRC "evil" networks
+(botnets) and a lovely graph that displays the number of remote and
+local scanners. TCP data also includes information about P2P using
+hosts, and soon will allow traffic classification via user-suppled
+PCRE pattern tags.
+</description>
+ <homepage> http://ourmon.sourceforge.net </homepage>
+ <year> 2006 </year><month> 3 </month> <!-- Entry creation date -->
+ <license> BSD </license>
+
+ <livesite> http://ourmon.cat.pdx.edu/ourmon</livesite>
+ <email> jrb@cs.pdx.edu </email> <!-- Author contact -->
+
+</rrdworld>