argus-eye GUI

[Harry Hoffman]

I saw a demo of NVisionIP at, I think, flocon 2005.

It looked pretty neat but from what I recall it was JAVA based and
required quite a bit of memory to operate on small to medium datasets.

I haven't really followed it but would be curious to hear how it's come
along.

As a tangent, the whole concept of a GUI is usually to make a tool
easier to use... Does anyone have a good set of notes or a presentation
for training new users on using Argus.

My current method of a quick overview of ra* tools and "let me know if
you have any questions" isn't really working all that well. But given
time constraints it's all I really have. :-(

Any thoughts or pointers?

Cheers,
Harry

Tom Briglia wrote:
> You might also want to check out the GUI Visualization tools put out by the
> SIFT project for they are based on Argus:
> 
> http://www.projects.ncassr.org/sift/
> 
> Rather than re-invent the wheel it would be nice to help figure out how to
> patch the SIFT tools (or Argus) so that they can utilize Argus 3.x as
> opposed to being stuck on 2.0.5.
> 
> Thx!
> 
> T.
> 
> 
> Quoting carter at qosient.com:
> 
>> Hey Phil,
>> This is great!!!   We already have a curses based tool for reading files,
>> near real-time streams, which supports our aggregation strategies, etc
>> ....,  its called ratop().
>>
>> If that could help you with your GUI, I would recommend that you take a
>> look!!!!
>> I have a version that makes argus data look like the screens from the
>> Matrix, also curses based, that I can share.
>>
>> Carter
>>
>> Carter Bullard
>> QoSient LLC
>> 150 E. 57th Street Suite 12D
>> New York, New York 10022
>> +1 212 588-9133 Phone
>> +1 212 588-9134 Fax
>>
>> -----Original Message-----
>> From: Philipp Letschert <phil at uni-koblenz.de>
>> Date: Sat, 4 Nov 2006 08:31:22
>> To:argus-info at lists.andrew.cmu.edu
>> Subject: [ARGUS] argus-eye GUI
>>
>> Hi,
>>
>> I've started a GUI for argus in Perl/Gtk2.
>>
>> current features are:
>> * read data from one or many argus logfiles
>> * display transaction data in colored table
>> * sorting and reordering of columns possible
>> * basic display filter usage
>>
>> planned features:
>> * serious tool
>> * bells and whistles
>>
>> screenshot:
>> http://www.uni-koblenz.de/~phil/argus-eye.png
>>
>> I'll release GPL'ed code within the next few weeks after major cleanups
>> and
>> implementation of display filter parser. Currently it's a mess of just
>> 500 lines
>> proof-of-concept...
>>
>> Please let me know if there is already ongoing work for a GUI or if you
>> have
>> other suggestions.
>>
>>
>> Cheers, Phil
>>
>>
>>
> 
>