Visualizing iptables Honeynet attack data

cipherdyne.org — Two of the Honeynet scan of the month challenges have included iptables log data. This page combines the psad CSV output mode with the AfterGlow project to generate graphical representations of attack data. Clearly shown are outbound connections from a compromised system to external SSH and IRC servers, and the graph of the Nachi worm is stunning.