Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-IDS
[Top] [All Lists]

Re: OSSIM Fedback

Subject: Re: OSSIM Fedback
Date: Thu, 15 Jun 2006 22:17:48 +0200
Dominique Karg wrote:

It's not my duty to enter into discussion if ossim is easy to use or not

It is easy to use - not so much to install ;)

I must say that I have to deny this and ask Stefano sincerely for proof
of this.

Let me say that your denial on public record here on this list is more
than enough - I believe you on your word.

However...

This is why parts of it may be not well documented, not clearly
structured and so on. But obfuscating / complicating code in purpose ?
No way.

Well, last time I looked (it was september last year) the OSSIM server
code was completely undocumented - not just in nice, user friendly docs,
but not EVEN IN THE CODE.

We had to reconstruct the communication between client and server by
reverse engineering the code and sniffing the communications, which is,
let me say this gently, UNCOMMON for an open source project aiming to
integration. Don't you think so ?

Anyway, if you have had trouble understanding the code and needed help,
we've got a small but fine user base who would've been glad to help

We tried, at that time, on both #ossim and on project mailing lists...

The answers we had were 1) in french and 2) private, so I won't quote
them here... but I can quote a brief sentence of one of your "user base"
members:
" Ce manque de commentaires est fait pour éviter la reprise et
modification du code source par d'autres personnes !! Un développeur
OSSIM a dit: "if hell was coded, it would have been done like our server" "

This mail, and others of the kind, were partially confirmed by devels on
the channel. If your policy has changed, or if this was just a huge
misunderstanding, I'll be glad to see some devel docs as soon as you can
fix them together. Even as drafts, we will be glad to help you put the
knowledge base together.

Best,
Stefano Zanero

------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
Choice Award from eWeek. As attacks through web applications continue to rise, 
you need to proactively protect your applications from hackers. Cenzic has the 
most comprehensive solutions to meet your application security penetration 
testing and vulnerability management needs. You have an option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request@cenzic.com for details.
------------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>