1. Installation

1.1 Welcome to Network Monitoring

1.2 System Requirements

1.3 Download Network Monitoring

1.4 Installing Network Monitoring

1.5 Setting up the Network Monitoring Environment

2. Configuration Files

2.1 Trigger File

2.2 Example Configuration

2.3 GUI Configuration

2.4 Other Configuration Files

3. A Small Configuration Example

3.1 Configuration File Setup

3.2 Starting the RMI registry and Running the SMS Agent Servers

3.3 Setting up the Database

3.4 Using the GUI

3.5 Console Event Viewer

4. Updating and Extending the Configuration

4.1 Agents

4.2 Detectors

4.3 New Events

4.4 New Machines

4.5 Configuration Editor

4.6 Subscriptions

5. Development of Detectors and Handlers

5.1 Detector Development

5.2 Handler Development

5.3 Agent Level API

5.4 Current Detector Overview

6. Configuration Files for Fault Tolerance and Self-Recovery

6.1 Failure Agents

6.2 Multiple Failure Agents

6.3 SMS Agent Recovery

6.4 Examples

6.4.1 Two Failure Agents

6.4.2 Two Failure Agents and SMS Agent Recovery

7. Monitoring Utilities

7.1 File System

7.1.1 Itinerary Agent and Signatures

7.1.2 Itinerary Agent Example

7.2 Snort

7.2.1 SnortEventDetector

7.2.2 SnortEventDetector Example

7.2.3 SnortRuleEventDetector

7.2.4 SnortRuleEventDetector Example

7.3 CERT

7.3.1 CertEventDetector

7.3.2 CertEventDetector Example

7.4 Wireless