IDS: Re: SNORT + Win32

[Martin Roesch <roesch () sourcefire com>]

I second that, if you're going to use web-based analysis tools please  
don't use ACID any more, BASE is under active development and is a fork  
from the original ACID codebase.  It appears that ACID is not under  
active development any longer...
     -Marty

On May 2, 2005, at 9:04 AM, Harper, Patrick wrote:

> For monitoring I use BASE  http://secureideas.sourceforge.net/  it is
> based on the ACID code but is so much nice and faster
>
>
>
> -----Original Message-----
> From: just1coder [mailto:just1coder () yahoo ca]
> Sent: Friday, April 29, 2005 10:17 AM
> To: focus-ids () securityfocus com
> Subject: SNORT + Win32
>
> Hi, I'm using SNORT and Win32 - so far so good. Are there any tools
> available commercial or otherwise for monitoring the logs and building
> reports?
>
> Thanks
>
> ----------------------------------------------------------------------- 
> -
> --
> Stop hurting your network!
>
> The NeVO passive vulnerability sensor continuously finds
> vulnerabilities,
> applications and new hosts without the need for network scanning.
> It also finds compromised systems with application-based intrusion
> detection.
> Go to http://www.tenablesecurity.com/products/nevo.shtml to learn more.
> ----------------------------------------------------------------------- 
> -
> --
>
>
>
>
> -----------------------------------------
> Disclaimer:  This electronic message, including any attachments, is
> confidential and intended solely for use of the intended recipient(s).  
> This
> message may contain information that is privileged or otherwise  
> protected
> from disclosure by applicable law. Any unauthorized disclosure,
> dissemination, use or reproduction is strictly prohibited. If you have
> received this message in error, please delete it and notify the sender
> immediately.
>
>
> ----------------------------------------------------------------------- 
> ---
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
> CORE IMPACT.
> Go to  
> http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> ----------------------------------------------------------------------- 
> ---
--
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Discover.  Determine.  Defend. - http://www.sourcefire.com
Snort: Open Source Intrusion Detection and Prevention -  
http://www.snort.org

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------