Integrative Anomaly Detection in Computer Networks
Prepared by Raazesh Sainudiin partly for Combient AB.
These are merely field notes for live research…
Basic Background Viewing
Basic Background Reading
Open Source Network Monitoring and Analytics Tools
Network Monitoring Systems
Automated Anomaly Detector
Github showcases security
- Structured Streaming of Network Logs
- Writing logs to hdfs:
- docker container for DNS logs Some instructions on getting the DNS logs collection going:
#Pull this docker down: storytel/dnsmasq # Then you will need these two lines to start logging queries to a file: log-facility=/var/log/dnsmasq.log log-queries=extra # Once that is in place, you need a syslog-ng to pick up the file and send it off to hdfs.