Re: Snort console recommendation

From: Bamm Visscher <bamm(at)satx.rr.com>
Date: Tue Jul 08 2003 - 11:13:40 EDT

Yes, the install for sguil is a bit painful right now (although the results are worth it). The op_sguil plugin should be included in the next release of Barnyard. The patches for stream4 and spp_portscan won't be included anytime soon, but are fairly simple to do.

Bammkkkk

On Tue, Jul 08, 2003 at 09:52:49AM -0500, Paul Schmehl wrote:
> I decided to try out sguil, so I installed all the necessary ports and then

---

The Lightning Console aggregates IDS events, correlates them with vulnerability info, reduces false positives with the click of a button, and distributes this information to hundreds of users.

Visit Tenable Network Security at http://www.tenablesecurity.com to learn more.

---

Received on Tue Jul 8 11:39:58 2003