Nebula is a data analysis tool that automatically generates intrusion signatures from attack traces. It runs as a daemon that processes data submitted from honeypots. New signatures are published as Snort rules and can be used to defend a network from future intrusion attempts.
a72605776c17e6c7038972b6fcfa0d17f63a693b21e21701518d5f1e328aa4ed