it looks very interesting, let me know when you have a beta out.
-----Original Message-----
From: Sam Evans [mailto:wintrmte@gmail.com]
Sent: Sunday, November 28, 2004 3:37 PM
To: Andreas Östling
Cc: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Snort Analisys platform
Wow, what you have so far looks fantastic!!!
On Sun, 28 Nov 2004 18:44:18 +0100 (CET), Andreas Östling
<andreaso@it.su.se> wrote:
Not yet, but I'm playing with a tool called Pigris that I hope I'll have
time to finish and release some time (I don't know when though). It has
the look and feel of a web-based alert browser but is a client written in
Perl/Tk that talks to the db. It works well with many sensors and events
and has some other useful features too. There are some early screenshots
and more info at http://people.su.se/~andreaso/pigris/screenshots/ if
you're interested.
You may also want to checkout Sguil at http://sguil.sf.net/. It scales
well but kind of assumes that every event (or correlated group of events)
has to be dealt with by an analyst. This can be a huge strength in some
environments but I'm not sure it would work well if you have 2 million
events a day (are your sigs really optimally tuned?)
/Andreas
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?listžort-users
Disclaimer:
This electronic message, including any attachments, is confidential and
intended solely for use of the intended recipient(s). This message may contain
information that is privileged or otherwise protected from disclosure by
applicable law. Any unauthorized disclosure, dissemination, use or reproduction
is strictly prohibited. If you have received this message in error, please
delete it and notify the sender immediately.
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list
