Re: HELP ON SNORT

[Rich Graves <rgraves () carleton edu>]

OSSIM is built on the end-of-lifed Debian Lenny, which terminates security updates in one week. Their version 4 might 
be worth looking at.

The combination of SecurityOnion and ELSA is looking pretty good -- or Splunk, if your budget/log volume ratio is 
acceptable. The main limitation of SecurityOnion is that it's 32-bit only, but snort/snorby themselves aren't terribly 
RAM-hungry. I'm going to put ELSA, MySQL, and a few other components on a separate 64-bit box.


----- Original Message -----

From: "Megan Carney" <Megan.Carney () selectcomfort com>
To: snort-users () lists sourceforge net
Sent: Monday, January 30, 2012 12:29:58 PM
Subject: Re: [Snort-users] HELP ON SNORT



OSSIM is a nice interface once it’s set up – when I set it up there were some difficulties getting the latest version 
of snort because of outdated libraries in the OSSIM distribution.

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!