gpss 2005-12-27

gpss is a gnuplot front end for analyzing snort perfmonitor log files.

It offers both 2D and 3D interactive or batch graphing of things like bits per second, packets per second, drop percentage, fragments per second, and more.

gpss project is useful as both a performance evaluation tool or a SNOC tool in the short term, and a trending tool for longer terms.

Usage:

For a list of arguments use the --help flag.

./gpss --tutorial | less
./gpss --faq | less

Will get you to either the tutorial or the faq. A short version however is this, and it works for me.

./gpss tlgraph

Assuming your on a machine with a /var/snort/snort.stats, youll get a nice 3d graph to play with on your X display. Itll look something like the following, but you can rotate it around. By default itll check back with the file every 5 seconds and replot if there is new data.