[Snort-users] ACID/BASE vs PRELUDE
rjenkins at ...12829...
Mon Sep 19 10:19:17 EDT 2005
You may want to check out Aanval's IDS console, both limited version and
commercial licensed version. Very powerful!
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Gene R
Sent: Monday, September 19, 2005 12:13 PM
To: snort-users at lists.sourceforge.net; ddodge at ...11827...
Subject: Re: [Snort-users] ACID/BASE vs PRELUDE
Disclaimer: member of Prelude Hybrid IDS development team.
Prelude as a Snort management console depends a little bit on what you
mean as a management console. In terms of viewing alerts, it does a
great job of providing a consolidated interface for security events
across all of your platforms and devices.
If, however, you mean as a method for actual management (changing
configuration, stopping and restarting services, managing rules, etc),
Prelude probably won't give you what you're looking for (yet!).
Basic support for sensor management is present in Prelude 0.9 (which
goes stable within the next few days), but the interfaces aren't written
At any rate, Prelude's greatest strength is in presenting your Snort
alerts alongside your host-based alerts, your firewall alerts, and all
manner of other things. BASE appears to be more of an analytical engine
for Snort alone.
Gene R Gomez
On Aug 26, 2005, at 10:38 AM, ddodge wrote:
> Has anyone done a good comparision between BASE
> (http://secureideas.sourceforge.net/) and Prelude
> (http://www.prelude-ids.org/) as a managment console for Snort ?
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
More information about the Snort-users