ChipMaster
/
Poor-Mans-IDS
1
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
The Poor Man's (or Woman's) Intrusion Detection System
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
21 Commits
1 Branch
133 KiB
 
 
 
 
Branch: master
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'master'
${ noResults }
Poor-Mans-IDS/TODO

26 lines
700 B
Raw Permalink Blame History 

  1. TODO

  2. ====

  3. 

  4.  - trafficctl: wild-card whitelisting. Either just remember "accepts" or use the "*" notation.

  5.  - trafficctl: "whole domain" should only change those entries in the group being reported. What about "*".

  6.  - should probably convert to use static-linked MySQL client. C++DB has trouble with longterm connections.

  7.  - trafficctl: comment field?

  8. 

  9. BUGS

  10. ====

  11. 

  12.  - The wild card blocks don't seem to be automatically moving DNS

  13.    entries into the block list.

  14.    

  15. 

  16. 

  17. IDEAS

  18. =====

  19. 

  20.  - what about drilling down on domains: domain.tld, then expand up

  21.    levels if there are more than a couple of entries.

  22.  

  23.  - Some way to browse by workstation traffic

  24.  

  25.  - See hosts that accessed a domain in the lists.