使用Snort和PHP构建一个小型网络防御系统.PDFVIP

developerWorks Linux Snort PHP [ 选择] dW , 2005 7 Linux PHP Snort Iptables Snort Snort PHP Snort Snort Snort Snort iptables PHP Snort IP : developerWorks Snort plugin Unix Socket syslog Snort Linux Unix Socket Iptables Snort Snort PHP Snort Snort PHP iptables (AO_Handler) PHP iptables () AO_Handler Web_Handler Unix Alertpkt Snort Snort PHP PHP (AlertHandler) BlockHanlder PH PHP Snort Alertpkt PHP Snort path /var/log/snort_alert Spo_alert_unixsock.h typedef struct _Alertpkt { u_int8_t alertmsg[ALERTMSG_LENGTH]; /* */ struct pcap_pkthdr pkth; u_int32_t dlthdr; /* datalink header offset. (ethern