Articles taggués ‘munin plugins’

Basic munin plugins for Snort

28/01/2014 Comments off

munin pluginsHere are some basic munin plugins for snort using perfmon (Enable preprocessor perfmonitor in snort.conf)
The snort.conf entry should look something like:

preprocessor perfmonitor: time 300 file /your/path/to/snort.stats pktcnt 5000

(Read the snort docs for more info on performance issues etc.)

Drop Rate:

Pattern Matching:

Traffic speed:


Avg KBytes/pkt:

Avg Pkts/sec:

Edit any one of them, to graph what you want from perfmon output. It should be easy!

And now I will test them myself!

Here is a picture to give you an idea on how the graphs looks: