Re: Intrusion Detection Recommendations

[Graham Toal <gtoal () UTPA EDU>]

Gary Dobbins wrote:

> Rather than ACID (which has apparently fallen out of active maint) we
> now manage our array or SNORTia with a combination of BASE and Aanval.
>  The former is at no charge, while there is a license required for the
> latter.


Also we are using SGUIL (http://sguil.sourceforge.net/)

Been pretty successful.  Helps if you know SQL.

G