Improved method of log gathering and storing for intrusion prevention system
Liang Gang · Jisuanji gongcheng yu sheji · 2010
To resolve the problem of the mismatching speed between log gathering and processing,the storage of abundant log files in high-speed network environment,ring buffer scheme is proposed to synchronize operations of log gathering and log processing.Pre-processing algorithm is designed to delete redundancy log records and enormous file set is adapted to store the massive log files.Experiments demonstrate that the proposed method is applicable in the Gigabit network environment,shrinking the log files’ scale and saving the uttermost log records as well.