SAM API Examples

Posted by Sam

Since the release of SAM 0.3.0 has hot and fresh API support baked in I thought I should put up examples so that somebody besides me could use them. Here's a taste of what it might look like to use the API to get the Threat Index.

require 'rubygems'
require 'active_resource'

class Threat < ActiveResource::Base
  self.site = 'http://127.0.0.1:3000/'
end

start = ARGV[0].to_i.hours.ago.strftime('%Y-%m-%d %H:%M')
threats = Threat.find(:all,
  :from => "/dashboard/threat_indexes.xml",
  :params => { :start_date => start, :limit => 5 })
puts "Source\t\tThreat Index" 
puts "------------------------------" 
for threat in threats
  puts "#{threat.formatted_source_address}\t\t#{threat.threat_index}" 
end

Check out the rest of the API examples.

Tags: sam

Snort Alert Monitor 0.3.0 Released

Posted by Sam

Version 0.3.0 of Snort Alert Monitor was released today. You can download the files at the SAM project site as well as a full changelog. Here's a short update on what's changed with this release.

  • iPhone web version
  • Added XML and JSON API support
  • Added CSV export options

Tags: sam

Snort Alert Monitor 0.2.0

Posted by Sam

Version 0.2.0 of Snort Alert Monitor was released today. You can download the files at the SAM project site as well as a full changelog. Here's a short update on what's changed with this release.
  • Postgres support
  • Add about page with contributions
  • Show references for signatures
  • User interface tweaks

Tags: sam

New Project Site for Snort Alert Monitor

Posted by Sam

I thought it was about time to treat Snort Alert Monitor like a real project so I set up a RedMine project site for it. On the SAM project page you can file bugs and request features. I'll be putting FAQs, files and everything up on that page as soon as time permits. This will be the authoritative source for all things SAM. Check it out and let me know what you think.

Tags: sam

Screenshots of SAM

Posted by Sam

There are a couple of screenshots of the new web based version of SAM here. Again feel free to leave comments about features you'd like to see.

Tags: sam