[Snort-users] Any BASE honchos here?

Paul Halliday paul.halliday at ...11827...
Wed Nov 10 13:09:15 EST 2010


On Wed, Nov 10, 2010 at 12:56 PM, Richard Bejtlich
<taosecurity at ...11827...> wrote:
> On Wed, Nov 10, 2010 at 11:42 AM, Castle, Shane
> <scastle at ...14946...> wrote:
>
>> Oh well. I'm seriously looking at implementing Sguil soon - but it
>> relies a bit on BASE too.
>>
>
> Hi Shane,
>
> Sguil has nothing to do with BASE.  No worries there.
>
> If you're looking for a BASE alternative, try Snorby:
>
> http://www.snorby.org
>
> If you want a full open source NSM suite, Sguil is still the only
> option.  NSMnow is a good way to try it out.
>
> Sincerely,
>
> Richard

FWIW, squert is also an option for those that use Sguil.

http://www.pintumbler.org/Code/squert




More information about the Snort-users mailing list