Honeypots mailing list archives

Picviz 0.3 released


From: "Sebastien Tricaud" <stricaud () inl fr>
Date: Sat, 20 Sep 2008 10:22:31 +0200 (CEST)

Picviz 'good coffee' 0.3 is *out*.
...to have a good coffee, we must filter it!

What is Picviz ?
================

Picviz is a parallel coordinates plotter, written to help people
finding a needle in a haystack when dealing with numerous events
on their system and struggling to maintain an acceptable level of
security.

It is a computer security visualization program, written in C with
high performances in mind. Python bindings are available, and are
used by the Picviz Frontend that you can use to dig into your graph.

Parallel coordinates, the core visualization technique used by Picviz
allows to represent graphs in N dimensions to see correlations among
variables, making it a useful data mining software.

Download!
=========

Everything, including download, installation instructions and
documentation, are available on the project webpage:
http://www.wallinfire.net/picviz

Beware, a new dependency was added on libpcre to allow pattern matching
filtering.

Tarball file size: 1267635
Tarball MD5: 54c0107965b7ed2d777ef2e768561b5b
Tarball SHA1: f09262cd05254cb5d2d2bba837601c28d0c9e827

Changelog
=========

* Filters: data to be visualized can be filtred, just like how you
do it with tcpdump already but with a different syntax:
 'show only plot > 50% on axis 2', to remove all lines not matching
 the criterion

and with the pcre module, you can even perform pattern matching to
hide or show wanted data:
 'show only value = "[0-9]foo.*" on axis 1'

or, select what the engine plotted:
 'show only plot <= 42 on axis 1'

* DShield perl class for pcv language generation scripts (tools/) for
 easy integration with dshield (have in red IP addr that match etc.)

* Penwidth property for lines: allow you to increase the line size
 a="123",b="foobar" [color="red",penwidth="2.0"]

* pcv tool rewritten

* Properties managed with hash

* CSV plugin: to translate pcv files into csv
 pcv -Tcsv file.pcv

* Manpage in pretty good shape




Current thread: