RE: Best snort analyzing tool

[Robert Reid <rreid () 1800FLOWERS com>]

Take a look at www.demarc.com, its free for the "personal" edition, and
there is also a full demo of the enterprise version available.

-----Original Message-----
From: Mam Ruoc [mailto:mamruoc () hotmail com] 
Sent: Tuesday, February 11, 2003 2:08 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Best snort analyzing tool


Greetings!

Currently I'm using ACID to analyze my snort logs using MySQL, but I've seen

a smoothwall box with IDS which has a quite good log analyzer...

I find ACID a bit hard to read, especially when the computer gets 
portscanned by one host (same type), it may report (or snort does) many 
events, isn't a way to group them by IP????

So I wonder which snort analyzer tool is best? For presenting via web... And

easy reading/grouping

Thanks in advanced...

_________________________________________________________________
MSN Messenger http://www.msn.no/messenger - Den korteste veien mellom deg og

dine venner



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com _______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Falling in love is easy--- it's the shopping that's hard! At 1-800-FLOWERS.COM we know how difficult it is to find just 
the right gift to say what's in your heart and what's on your mind. Click on the link below and we'll help you find the 
right gift to remind every one of your Valentines just how special they are.
<A 
HREF="http://www.1800flowers.com/flowers/x_e.asp?r=vdoutlook1&g=flowers/gift/valentine2003_gift.asp";>www.1800flowers.com</A>


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users