KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #dsh #dsh-plugin #ai-agent #claude-code #codex #typescript #ai-agents #mcp #cli #rust #deepseek-harness

grIDS

★ 61 Open GitHub ↗

My network monitoring solution and tools that go along with it.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# This project is now archived
Thanks for the support and interest, but this project hasn't been updated in almost a decade, and there's probably other solutions by this point.

# grIDS
My network monitoring solution and tools that go along with it. This setup is designed to be contained in an all-in-one sort of system, but services can be separated into individual hosts if you have a higher load that requires more resources.

The goal for this project is to help people combine multiple open-source tools to have a useful network monitoring solution. Within this project, I'll also include custom scripts that help make this system even more useful.

Feedback, corrections, and suggestions are welcomed and appreciated. Reach out to me on [Twitter](https://www.twitter.com/0xgradius) or here on Github as an [Issue](https://github.com/gradiuscypher/grIDS/issues).

# Manual Configuration Steps

[Wiki](https://github.com/gradiuscypher/grIDS/wiki)

To get started with configuring the system, follow the steps found in the [Wiki](https://github.com/gradiuscypher/grIDS/wiki). Each of the [Configuration](https://github.com/gradiuscypher/grIDS/wiki/Configuration) sections walks you through the parts of building a working all-in-one IDS system.

# Docker Configuration Steps

To deploy the NSM via Docker containers, follow the instructions found under the [Docker Configuration](https://github.com/gradiuscypher/grIDS/wiki/Docker-Configuration) section of the Wiki.

# Screenshots
Screenshots of some Kibana Dashboards that have been created and powered using this setup

![DASH1](https://raw.githubusercontent.com/gradiuscypher/grIDS/master/docs/images/overview_dash.PNG)
![DASH2](https://raw.githubusercontent.com/gradiuscypher/grIDS/master/docs/images/dashboard_alert_exploration.PNG)

# Future Additions + Modifications + Ideas
This is a list of future tools that could be added to this toolset for even more features. Also includes modifications.

#### Features
* Sysmon logging
* Bro logging
* Centralized Logging
* Webhook integration for alerts
* FPC and usability tools
* Pi-Hole DNS service
* Include [EveBox](https://evebox.org/) for alerting
* Include [Scirius](https://github.com/StamusNetworks/scirius) rule management.

#### Modifications
* Performance tuning for Elastic Stack
* Performance tuning of Suricata - spread load between CPU threads

#### Ideas
* IDS Sensor on a Raspberry Pi
* Spreading services out among hosts, multiple sensor configuration and management
* Setting up an iptables sensor
* Setting up a hardware network tap
* Process for upgrading/updating the OS

grIDS

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README