Snort mailing list archives

RE: Is ACID Dead?


From: "Michael Pacheco" <mpacheco () turbinegames com>
Date: Fri, 16 Jan 2004 16:03:44 -0500

Hi Roman!!!!

Glad to here you are around and alive (and healthy I hope)!!! Will you
be including portscan2 and or flow-portscan functionality?  Let me know
if you need testers - I have a small test network that I would be glad
to use in helping knock around any changes.

Mike

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Roman
Danyliw
Sent: Friday, January 16, 2004 3:33 PM
To: snort-users () lists sourceforge net
Cc: roman () danyliw com
Subject: Re: [Snort-users] Is ACID Dead?

Helllo all,

I have indeed been busy with a variety of other projects (e.g.,
http://aircert.sourceforge.net).  However, ACID is not dead, despite my
lack of
updates to the public code.  A piece of what I have been working on
lately is a
complete redesign of the existing ACID tool focusing on scalability and
modularity.  This new software will be ACID 2.0 so to speak.  It
operates on a
database schema similar to the one currently used in Snort, with a
number of
optimizations.  Those primarily interested in reporting and analysis
should be
happy with the initial release.  Features related to managing the data
itself
will be crude at first and take a bit longer to develop.

Cheers,
Roman

On Thu, 15 Jan 2004 15:11:55 -0600, "McCash, John"
<John.McCash () andrew com> wrote :

Hi Everyone,
      I've used snort and ACID off and on at several positions over
the last three
years, and have just noticed that ACID doesn't seem to have been updated
since
early last year. This is especially troubling in view of the fact that
it's the
nicest GUI front-end for snort that I've seen, and that since the
portscan
plug-in was updated in snort 2.1.0, the portscan display features of
ACID no
longer work as well. I know that if you set the output-mode to
pktknudge, it at
least displays the portscans, but that's not a very nice workaround. I
dropped
Roman a note in email on 1/9/04, and haven't heard back from him. Does
anyone
know what the development status of ACID is? If, in fact, it's dead, can
anyone
recommend something with similar functionality to replace it?
              Thanks lots in advance
                      John

------------------------------------------------------------------------
------------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information.  
If you have received it in error, please notify the sender
immediately and delete the original.  Any unauthorized use of
this email is prohibited.

------------------------------------------------------------------------
------------------------
[mf2]


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: