[Snort-users] Sguil Version 0.7.0
bamm.visscher at ...11827...
Wed Mar 26 00:49:29 EDT 2008
Sguil Version 0.7.0 has been released! 
It has been a couple of years of changes and bugfixes since the last
release. The biggest change is the replacement of the sensor agent
with individual components for each collection type. The new agents
are called snort_agent.tcl, pcap_agent.tcl, and sancp_agent.tcl. By
splitting out the agents, collection for these different data types
can be placed on separate hardware and still be correlated via their
A new collection agent for PADS (http://passive.sourceforge.net) is
also included in this release although it is still considered beta.
Also included is an example_agent.tcl script that documents how custom
agents can be created. Other agents have been written for ModSecurity
 and OSSEC .
As always, help can be found on the sguil-users mailing list or in IRC
on #snort-gui via irc.freenode.net.
David Bianco has provided a great HOWTO  and Rich Fifarek has
created a yum repository  that should be updated soon.
Thanks for everyone's help and happy F8ing,
sguil - The Analyst Console for NSM
More information about the Snort-users