What is a good UI and analyzer for SNORT ?

zali · 04-18-2006, 04:34 AM

Hi,
I want a good User Interface and analyzer for Snort, I want to ready a complete package based on snort for intrusion detection. would you please help me? Is there any one who is introduced with snort and has worked with it?

demian · 04-18-2006, 04:41 AM

acid: http://acidlab.sourceforge.net/

ninjaz · 04-18-2006, 04:41 PM

I use BASE for mine. It was based off of ACID which is no longer being supported I believe.
http://sourceforge.net/projects/secureideas/

zali · 04-19-2006, 10:41 PM

Thanks to demian and ninjan, I must study about ACID and BASE, and again ask u about them. any other advise, please tell me.

ninjaz · 04-19-2006, 10:47 PM

Just make sure that you compile Snort for MySQL support. Other than that its not hard to get the up and running.

zali · 04-19-2006, 10:58 PM

Hi again, I have another question about snort, I wanted to install SNOR-2.4.4 in snort-inline mode, so I configured it like below for installing :
./configure --enable-inline

but the snort-inline binary file was not maked. only a file named snort was maked. why?
if I must use snort-inline self to install it?

zali · 04-20-2006, 09:40 AM

Hi,
How can I compare ACID with BASE? what are the main goals of each of them?
Would you please guid me again?

zali · 04-21-2006, 02:52 AM

Why Nobody replied my question?

please help, I need help of you seriously!!! please!