This website is best viewed using the Adobe Flash Player version 10.0.0 or greater.


Snort & Syslog Intrusion Detection and Correlation

Aanval Home - @aanval on Twitter - Aanval on Facebook

Background processing unit ("BPU")
A background processing unit ("BPU") is a processing script that performs a variety of operational tasks for the Aanval console.

As of Aanval 4, there are 5 active BPU's running.

Summary of BPU functionality

BPU A is known as the IMPORT processor and is responsible for normalizing snort and syslog data for use within the console.

BPU B is known as the CORE processor and performs tasks such as hostname resolution, permissions verification, version checking, upgrades, etc.

BPU C is known as the INDEX processor and is responsible for creating and or re-indexing data for searching and reporting.

BPU D is known as the SEARCH processor and performs all system and user search processing.

BPU E is known as the REPORT processor and performs all system and user report processing.

Each BPU may be run independently, however it is recommended that these BPU's be run as instructed by the provided helper scripts which ensure they run continuously as intended.



Starting and stopping the BPU's
To start and stop the Aanval background processing units ("BPU's"), a helper script is provided and its usage is recommended.

This helper script ("idsBackground.pl") is located within the /apps/ directory relative to your Aanval installation.

Help on usage for this helper script can be accessed by running idsBackground.pl with the -help parameter.

Starting the BPU's

To start the BPU's, run the following command from the /apps/ directory of your Aanval installation:

perl idsBackground.pl -start

or if you prefer and the script has execute permissions:

./idsBackground.pl -start

Stopping the BPU's

To stop the BPU's, run the following command from the /apps/ directory of your Aanval installation:

perl idsBackground.pl -stop

or if you prefer and the script has execute permissions:

./idsBackground.pl -stop




Aanval by Tactical FLEX - http://www.tacticalflex.com/ - 800-921-2584

The Aanval Intrusion Detection and Correlation Console is a web-based snort and syslog gui for management, reporting and analysis.
Logos and trademarks are property of their respective owners.