Snort mailing list archives
RE: ACID Dates
From: Joel Esler <eslerj () rcert-s army mil>
Date: Mon, 31 Jan 2005 11:32:38 -0500
Just to clarify, BASE is a FORK of ACID, not an extension. On Mon, 2005-01-31 at 07:59 -0800, Michael Steele wrote:
BASE is an extension of ACID. Although you may not see visible changes, the code has been updated, and there have been enhancements added. As far as the time to refresh the database; it has always been there and that could be a great concern to many. My suggestion is to keep the database down to under 300k alerts and increase memory to 1GB. I really don't think there is much that can be done here, other then changing the schema of the database, and the way BASE access the new database schema. I've never tried OpenAanval, so I really can't comment. I know it's tied to the commercial product Aanval, and there are usage restrictions, unlike ACID or BASE which have none. That's why my guides continue to be distributed with BASE as the Console of our choice. Kindest regards, Michael... WINSNORT.com Management Team Member -- Pick up your FREE Windows or UNIX Snort installation guides mailto:support () winsnort com Website: http://www.winsnort.com Snort: Open Source Network IDS - http://www.snort.org-----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users- admin () lists sourceforge net] On Behalf Of Wes Young Sent: Monday, January 31, 2005 5:58 AM To: Chris Vaughan Cc: Dave C; snort-users () lists sourceforge net Subject: Re: [Snort-users] ACID Dates -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I run them both, I don't think either one is better than the other, they both have very powerful features.. Aanval has a great way of managing alerts and sifting through large amounts of data, but it has problems extracting data into emails etc... this is where I think BASE can play a very good role with it's alert groups etc.... IMO running both simultainiously will give you a very powerful combo..... Chris Vaughan wrote: | I looked at the website, and it looks a lot like ACID. | | What do you like about BASE so much more? What are it's advantages over ACID? What about compared to OpenAanval? | | -----Original Message----- | From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Dave C | Sent: Wednesday, January 26, 2005 6:17 PM | To: snort-users () lists sourceforge net | Subject: Re: [Snort-users] ACID Dates | | Dump ACID and use BASE | http://secureideas.sourceforge.net/ | | ----- Original Message ----- | From: "James M. Driskell" <jdriskell () ups edu> | To: <snort-users () lists sourceforge net> | Sent: Wednesday, January 26, 2005 4:50 PM | Subject: [Snort-users] ACID Dates | | | |>Hello List, |> |>I was running some Snort reports this morning using the ACID interface and |>I |>noticed that the drop-down year selection window only goes up to 2004. |>I'm |>using ACID v0.9.6b23. Any ideas on how to fix this? |> |>Thanks, |> |>Jim Driskell |> | | | | | | ------------------------------------------------------- | This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting | Tool for open source databases. Create drag-&-drop reports. Save time | by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. | Download a FREE copy at http://www.intelliview.com/go/osdn_nl | _______________________________________________ | Snort-users mailing list | Snort-users () lists sourceforge net | Go to this URL to change user options or unsubscribe: | https://lists.sourceforge.net/lists/listinfo/snort-users | Snort-users list archive: | http://www.geocrawler.com/redir-sf.php3?list=snort-users | | | | | ------------------------------------------------------- | This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting | Tool for open source databases. Create drag-&-drop reports. Save time | by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. | Download a FREE copy at http://www.intelliview.com/go/osdn_nl | _______________________________________________ | Snort-users mailing list | Snort-users () lists sourceforge net | Go to this URL to change user options or unsubscribe: | https://lists.sourceforge.net/lists/listinfo/snort-users | Snort-users list archive: | http://www.geocrawler.com/redir-sf.php3?list=ort-users | | - -- Wes Young Network Secuity Analyst University at Buffalo GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFB/jlP1M5o0FsrrbERAqyDAJ981klq6LR4eI8FlLdSKGdZV0+axQCfXvQ5 xhTy7RwyfYvtHFAyxhpPafY= =21HH -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Joel Esler <eslerj () rcert-s army mil>
Current thread:
- ACID Dates James M. Driskell (Jan 26)
- Re: ACID Dates Kevin Johnson (Jan 27)
- Re: ACID Dates Dave C (Jan 28)
- ACID Problems (here's your fix it) Joel Esler (Jan 28)
- <Possible follow-ups>
- RE: ACID Dates Chris Vaughan (Jan 28)
- RE: ACID Dates Kevin Johnson (Jan 28)
- RE: ACID Dates Michael Steele (Jan 28)
- Re: ACID Dates Wes Young (Jan 31)
- RE: ACID Dates Michael Steele (Jan 31)
- RE: ACID Dates Kevin Johnson (Jan 31)
- RE: ACID Dates Joel Esler (Feb 01)
- RE: ACID Dates Kevin Johnson (Jan 28)
- RE: ACID Dates nhdave (Jan 31)
- RE: ACID Dates Shackleford, David M. (Jan 31)