Re: HELP ON SNORT

[Jeremy Hoel <jthoel () gmail com>]

I disagree a bit.  BASE is very easy to Setup and use and it gets the
analyst up and running and able to look at results very fast.  Taking
the time to install Snorby or SGUIL later is probably a good idea, but
base gets it up and running and you know it's working before you go
fighting ruby or tcl.

On Fri, Jan 27, 2012 at 9:23 PM, Martin Holste <mcholste () gmail com> wrote:
> Also, don't use BASE.  Use Snorby.
>
> On Tue, Jan 24, 2012 at 12:32 PM, Joel Esler <jesler () sourcefire com> wrote:
> > On Tue, Jan 24, 2012 at 1:24 PM, Jagan Mohan Reddy D
> > <jagan.mohan507 () gmail com> wrote:
> > > i am looking for snort + BASE on Ubuntu 10.04.....
> > >
> > > how do i install and configure the BASE with Snort...........?
> > www.snort.org/docs
> >
> >
> > > Similarly, how do i install & configure the SnortSam on Ubuntu as an
> > > IPS......?
> >
> > SnortSam is not an IPS, it's a reaction-based system.  Aside from that, look
> > into barnyard2
> > --
> > Joel Esler | http://blog.snort.org | http://vrt-blog.snort.org |
> > http://blog.clamav.net
> > Twitter:  http://twitter.com/snort
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Keep Your Developer Skills Current with LearnDevNow!
> > The most comprehensive online learning library for Microsoft developers
> > is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> > Metro Style Apps, more. Free future releases when you subscribe now!
> > http://p.sf.net/sfu/learndevnow-d2d
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest Snort
> > news!
>
> ------------------------------------------------------------------------------
> Try before you buy = See our experts in action!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-dev2
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!