In this lecture I will start explaining about how to use.
So I will click on the icon of screen and we see that we are being asked for our credentials
and then we are being asked for the interfaces to be monitored and I will select to iterate one interface
to be monitored with is not and then I will click on that screen and he will see the alerts coming from
squeal and we see columns like the s.t. first status of alert column and we see hear the word of Aarti
which means real time and we see here that we have alerts with the colors of red or orange.
So these is the status of the alert and also we see columns like the count so the number of related
alerts.
And also we see the sensor which is here iterate one one which means snot and we can check for that
if we click on the alien status.
And here we see that snot is the Internet one one and also we see that the alerts has all started with
the number of three which means again means snot.
And also we see columns like the date and time the alert I.D. and source on the citizen IP addresses
and bots and we click on this group of alerts and then click on Show back data we can see the data content
on the packets of these alerts.
So here we see the IP addresses DTV and data and we click on the showroom we see the rule of snort that
triggered this group of alerts.
And here we see that it is it CBC or the earlier Windows file download HDTV and for the second group
of alerts we see that it is possible Trojan.
And we can guess that these two groups of events are related since they have the same count number and
also the same timestamp and the same socket information so the same source IP addresses and destination
eyewitnesses source and destination bots.
And if we want to show those group of related alerts we can click on the count column here and select
view curated events.
And here we see that the alerts are being and grouped so we are seeing now the related or those related
events the 24 events so snort or angry crowd at those events since they are related so in this lecture
I have started explaining about squeal by exploring its interface and in the next lecture I will continue
that explanation specifically about how to buy vote from squeal into other tools.