Educause Security Discussion mailing list archives

anyone using OSSIM....


From: Russell Fulton <r.fulton () AUCKLAND AC NZ>
Date: Tue, 16 Mar 2010 18:20:40 +1300

We have just set up a default install of OSSIM and first impressions are favourable -- what seems to be lacking is 
decent documentation -- presumably you get this when you buy the commercial version.

Does anyone have any notes/experience in using OSSIM with several different snort sensors that run different rule sets 
and need to be treated separately?

Or even for getting snort data in from sensors on other machines...

R

Current thread: