Introduction
Monitor Intrusion Detection and Administration System
What is MIDAS:
The MIDAS 'server' is made up of several applications that handle specific portions of the functionality. It uses Client/Server connections to centralize the configuration
and data colection. MIDAS also has built in support for Big Brother clients as well as NetSaint/Nagios plugins. This allows an easy transition from these packages.
WebView: WebView is the PHP based web front end application. It is used to configure the different aspects of MIDAS as well as view the data collected.
MIDASd: MIDASd is the central data collection server. This is where all client applications connect to. It stores/retrieves its information from the MySQL server.
MIDASc: MIDASc is the MIDAS 'Check' client. It performs local (Ie Disk, CPU, RAM, Etc) and Remote (Ie TCP, SNMP, etc) checks. MIDASc collects its check information from MIDASs
each time it cycles through the checks assigned to it. You can assign multiple MIDASc clients the same checks to allow multi point checks.
MIDASs: MIDASs is the 'Snort Pipe' its job is to take the output of Snort and parse out the packet and alert data. It also attaches to MIDASs and pulls its Snort Config and Rule
sets. When Snort generates an Alert MIDASs will then pass the alert and packet information. MIDASs uses a local packet cache to retrieve the actual packet information
from. The benifit of this approach over using the built in DB support of Snort is that it greatly reduces the performance overhead of the Snort application, the Network usage
and the MySQL server.
MIDASn: MIDASn is the MIDAS Network Monitoring client. This application watches user specified interface(s) and reports back network traffic information to be used in making the Network Monitor Graph.
MIDASa: MIDASa is the Alert processing server. it handles sending out the alerts by using SNPP and/or SMTP transports.
MIDASb: MIDASb is the Big Brother client server (Ie what the Big brother clients connect to). When a Big Brother client connects MIDASb reformats the text and sends it to the MIDASd server to process.
Back to Top
Copyright: MIT License
Copyright (c) 2003 Tom Cashmore
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to
deal in the Software without restriction, including without limitation the
rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
sell copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
IN THE SOFTWARE.
Back to Top
last modified: Fri Nov 22 2:54 PM CST 2003