About using ossim
Some time ago, I accidentally saw the OSSIM system. I checked on the Internet to know that this thing is so powerful!
After searching in 51cto's blog, I saw that teacher Li Chenguang had studied it a long time ago, and I followed suit. The version I am using is 4.15, which is a little different from what the teacher said. I feel that the new version is still very powerful! And the software seems to be updated every week. Some common open source installation classes of software are integrated together, openvas scanning for vulnerabilities, collection of logs, operating systems, virtualization, network devices can be collected. It's too powerful. The ntop tool works well.