Full Disclosure mailing list archives
What Intruder Detection System (IDS) or Network Security Monitor (NSM) do you use?
From: Dan Ballance <tzewang.dorje () gmail com>
Date: Mon, 28 Jan 2013 18:46:24 +0000
Hi guys and girls, If anyone had 30 seconds to spare to make a recommendation I'd be very appreciative. I have tried to us Prelude in the past, but last time I looked, they had fallen out with Snort :( I have also tried Sguil and got that working nicely with Security Onion ( http://securityonion.blogspot.co.uk ) for a single machine but will need something that can monitor network-wide. What are other folks out there using? Should I persevere with hand-rolling Sguil myself or is there another system out there that I have missed? thanks!
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- What Intruder Detection System (IDS) or Network Security Monitor (NSM) do you use? Dan Ballance (Jan 29)