psykoda.io.reader package

Submodules

psykoda.io.reader.base module

API

class psykoda.io.reader.base.Reader

Bases: abc.ABC

IDS log reader API.

abstract load_log(dt: datetime.datetime) → pandas.core.frame.DataFrame

Load IDS log of date.

psykoda.io.reader.snort_csv module

Snort CSV files

exception psykoda.io.reader.snort_csv.ColumnsNotFound

Bases: Exception

snort.conf line does not have columns information.

class psykoda.io.reader.snort_csv.SnortCSV(*, filename: str, columns: List[str] = ['timestamp', 'sig_generator', 'sig_id', 'sig_rev', 'msg', 'proto', 'src', 'srcport', 'dst', 'dstport', 'ethsrc', 'ethdst', 'ethlen', 'tcpflags', 'tcpseq', 'tcpack', 'tcplen', 'tcpwindow', 'ttl', 'tos', 'id', 'dgmlen', 'iplen', 'icmptype', 'icmpcode', 'icmpid', 'icmpseq'], year_included=False)

Bases: psykoda.io.reader.base.Reader

Load IDS log from Snort CSV files.

load_log(dt: datetime.datetime) → pandas.core.frame.DataFrame

Load IDS log of date.

psykoda.io.reader.snort_csv.columns(conf: TextIO)

Parse snort.conf into columns information.

psykoda.io.reader.snort_csv.columns_from_conf_line(line: str)

Parse snort.conf line into columns information.

psykoda.io.reader.snort_syslog module

Snort syslog

Todo

whole module

Module contents

IDS log readers.