[Snort-users] Looking for an alternative to BASE

Dewhirst, Rob robdewhirst at ...11827...
Sat Nov 12 09:24:51 EST 2011


you can run the sguil client on linux.

On Sat, Nov 12, 2011 at 6:42 AM, Michael Steele <michaels at ...9077...> wrote:
> Squil is only available in client form for windows. I need an all-inclusive
> option for Windows be it Perl, or PHP driven.
>
>
>
> Kindest regards,
>
> Michael...
>
>
>
>
>
> From: salawank [mailto:tdr.local at ...11827...]
> Sent: Saturday, November 12, 2011 12:36 AM
> To: Michael Steele
>
> Subject: Re: [Snort-users] Looking for an alternative to BASE
>
>
>
> I would suggest Sguil and Snorby.
>
> On Sat, Nov 12, 2011 at 12:58 PM, Michael Steele <michaels at ...9077...>
> wrote:
>
> If you want me to specifically exclude your query then, ok; It's not
> intended for commerical use.
>
> However, I'm not to sure why it woud make a difference.
>
> Kindest regards,
> Michael...
>
> -----Original Message-----
> From: Richard Bejtlich [mailto:taosecurity at ...11827...]
> Sent: Friday, November 11, 2011 10:29 PM
> To: Michael Steele
> Cc: snort-users at lists.sourceforge.net
> Subject: Re: [Snort-users] Looking for an alternative to BASE
>
> Hello,
>
> Will this interface appear on your "WinIDS - Windows Intrusion Detection
> System"?
>
> http://www.winsnort.com/index.php?module=zWebstore&ot=product&filter[categor
> y_id]=10031
>
> Sincerely,
>
> Richard
>
> On Fri, Nov 11, 2011 at 6:21 PM, Michael Steele <michaels at ...9077...>
> wrote:
>> As most know the BASE frontend pretty much works On Windows, as it
>> does on UNIX. However with the direction that PHP has taken towards
>> Windows, Microsoft is now providing the PHP5.3.x  drivers for SQL Server
> 2008.
>>
>> BASE is no longer compatible with this configuration (Windows, SQL
>> Server 2008, and PHP 5.3.x). Most of what I do on my site is providing
>> educational, and proof of concept support, using Snort on Windows.
>>
>> What I'm looking for is a comparable replacement for BASE, that will
>> allow users to have a simple user intuitive interface.
>>
>> Note: There are drivers (not furnished by Microsoft) out there that
>> does allow basic fuctionality to bridge SQL Server 2008 and PHP 5.3.x
>> but they are not 100%, and they will eventually cease to work as SQL
>> Server 2008 is updated.
>>
>> Any suggestions would be greatly appreciated.
>>
>> Kindest regards,
>> Michael...
>>
>>
>
> ----------------------------------------------------------------------------
> --
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
> news!
>
>
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
> news!
>
>
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
> news!
>




More information about the Snort-users mailing list