Meeting 2005-03-12
From GSLUG
[edit] March 12, 2005
[edit] Network Security Monitoring, by James Affeld.
- Monitoring your Network for security issues is a must in the modern virus and worm filled world. James will discuss 4 sources of indicators and warnings of hostile network traffic and some tools to collect and analyze them. He'll also introduce a console setup that ties them together.
- The four sources covered will be:
- Statistical data with MRTG
- Session data with SANCP
- Full Content data with tcpdump and ethereal
- Alert data with Snort
- and tying it together with the Sguil console.
- This talk will discuss the Open Source Voice over IP product Asterisk.
- The outline is as follows:
- VoIP Overview
- The Communication Problem
- Equipment - Sipura
- Service - FreeWorld Dialup
- Local PSTN access to FWD network
- Adding More Capability - Asterisk
- Asterisk
- Configuration
- Install
- QoS concerns