The Poor Man's (or Woman's) Intrusion Detection System
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

sample.conf 1.0 KiB

1234567891011121314151617181920212223242526272829303132333435
  1. # This is a sample config file. A single file can be used as repository of
  2. # information for all of the tools in this package, other than "trafficctrl",
  3. # since its a C++CMS app and C++CMS needs JSON to setup its features.
  4. # List of address prefixes that represent our networks (us)
  5. [us]
  6. 192.168.1.
  7. # Traffic monitor (trafficmon) settings
  8. [Traffic Mon]
  9. db user =
  10. db password =
  11. db name =
  12. # db host =
  13. # Sample List of connections to ignore. This is used by iptraffic and
  14. # badtrafficrpt.
  15. # Format (TSV):
  16. # us_IP us_port them_IP them_port them_name proto in
  17. # * can be used to match all in the *_IP, "them_name" and "proto" fields.
  18. # 0 is the wild card for ports. No wild card for "in".
  19. # *_IP fields can be prefixes ending in the appropriate address component
  20. # separator. This means you can only mask on the three standard IPv4
  21. # classes (A, B & C). IPv6 can mask on any 16bit boundary.
  22. [ignores]
  23. # muttering to self
  24. 127.0.0.1 0 127.0.0.1 0 * * 0
  25. 127.0.0.1 0 127.0.0.1 0 * * 1
  26. ::1 53 ::1 0 * * 0
  27. ::1 53 ::1 0 * * 1