Can definitely agree with all the stated reasons in that it is an actively
updated and very useful tool to have in one's kit and correct me if I am wrong
but BASE now does a 5 minute refresh as well where I don't think ACID did. And
that is a very handy feature (IMnsHO) when there are a number of sensors being
monitored.
Heck, we just paid BIG bucks at work for an IDS (I'll spare them and not
mention which one) and it is so cludgy I'm actually thinking of seeing if I can
put BASE on the sensors instead! ;-)
Michael Steele wrote ..
This is just my 2 cents; anyone using ACID should switch to BASE. The simple
reason is that ACID is no longer being developed and BASE is being actively
developed. BASE is an upgraded ACID and fixes some of the quirks that ACID
has been plagued with for the last few years.
For anyone running ACID it is now time to migrate to BASE. It's still one
of
the very few free consoles that is not linked to any commercial affiliation.
If people want to try a little different type of console, they might want
to
try Snortsnarf. It hasn't been serviced in a year or two but it works great
and does some things that BASE does not, and it's free.
Kindest regards,
Michael...
WINSNORT.com Management Team Member
--
Pick up your FREE Windows or UNIX Snort installation guides
mailto:support@winsnort.com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org
-----Original Message-----
From: snort-users-admin@lists.sourceforge.net [mailto:snort-users-
admin@lists.sourceforge.net] On Behalf Of Kevin Johnson
Sent: Friday, January 28, 2005 4:36 PM
To: Chris Vaughan
Cc: Dave C; Snort Users
Subject: RE: [Snort-users] ACID Dates
On Fri, 2005-01-28 at 13:04, Chris Vaughan wrote:
I looked at the website, and it looks a lot like ACID.
What do you like about BASE so much more? What are it's advantages
over
ACID? What about compared to OpenAanval?
First I would like to thank Dave C for the resounding answer.<g>
As one of the BASE project leads, I guess I can answer this. BASE looks
a lot like ACID because it is a fork of the ACID code base. ACID has
not been recently updated where as the BASE project is hyperactively
supported.<g>
BASE has quite a few bug fixes that have been missing from ACID. As
to
your original email, BASE dynamically generates the date drop downs so
we don't have the release every year issue. BASE also has a basic user
authentication system which is a commonly asked for feature.
BASE will also co-exist with ACID as we have only added to the database
schema. So if you wanted to you could run both to see if it works for
you.
If you have any questions, email us at base@secureideas.net or check
out
the sourceforge.net site.
Kevin
-------------------
BASE Project Lead
http://sourceforge.net/projects/secureideas
http://base.secureideas.net
The next step in IDS analysis!
