RE: ACID Dates

["Michael Steele" <michaels () winsnort com>]

BASE is an extension of ACID. Although you may not see visible changes, the
code has been updated, and there have been enhancements added. As far as the
time to refresh the database; it has always been there and that could be a
great concern to many. My suggestion is to keep the database down to under
300k alerts and increase memory to 1GB. I really don't think there is much
that can be done here, other then changing the schema of the database, and
the way BASE access the new database schema.

I've never tried OpenAanval, so I really can't comment. I know it's tied to
the commercial product Aanval, and there are usage restrictions, unlike ACID
or BASE which have none. That's why my guides continue to be distributed
with BASE as the Console of our choice.

Kindest regards, 
Michael...

WINSNORT.com Management Team Member
-- 
Pick up your FREE Windows or UNIX Snort installation guides       
mailto:support () winsnort com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org


> -----Original Message-----
> From: snort-users-admin () lists sourceforge net [mailto:snort-users-
> admin () lists sourceforge net] On Behalf Of Wes Young
> Sent: Monday, January 31, 2005 5:58 AM
> To: Chris Vaughan
> Cc: Dave C; snort-users () lists sourceforge net
> Subject: Re: [Snort-users] ACID Dates
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I run them both, I don't think either one is better than the other, they
> both have very powerful features.. Aanval has a great way of managing
> alerts and sifting through large amounts of data, but it has problems
> extracting data into emails etc... this is where I think BASE can play a
> very good role with it's alert groups etc.... IMO running both
> simultainiously will give you a very powerful combo.....
>
> Chris Vaughan wrote:
> | I looked at the website, and it looks a lot like ACID.
> |
> | What do you like about BASE so much more? What are it's advantages
> over ACID?  What about compared to OpenAanval?
> |
> |  -----Original Message-----
> | From:       snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net]  On Behalf Of Dave C
> | Sent:       Wednesday, January 26, 2005 6:17 PM
> | To: snort-users () lists sourceforge net
> | Subject:    Re: [Snort-users] ACID Dates
> |
> | Dump ACID and use BASE
> | http://secureideas.sourceforge.net/
> |
> | ----- Original Message -----
> | From: "James M. Driskell" <jdriskell () ups edu>
> | To: <snort-users () lists sourceforge net>
> | Sent: Wednesday, January 26, 2005 4:50 PM
> | Subject: [Snort-users] ACID Dates
> |
> |
> |
> |>Hello List,
> |>
> |>I was running some Snort reports this morning using the ACID interface
> and
> |>I
> |>noticed that the drop-down year selection window only goes up to 2004.
> |>I'm
> |>using ACID v0.9.6b23.  Any ideas on how to fix this?
> |>
> |>Thanks,
> |>
> |>Jim Driskell
> |>
> |
> |
> |
> |
> |
> | -------------------------------------------------------
> | This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> | Tool for open source databases. Create drag-&-drop reports. Save time
> | by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> | Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> | _______________________________________________
> | Snort-users mailing list
> | Snort-users () lists sourceforge net
> | Go to this URL to change user options or unsubscribe:
> | https://lists.sourceforge.net/lists/listinfo/snort-users
> | Snort-users list archive:
> | http://www.geocrawler.com/redir-sf.php3?list=snort-users
> |
> |
> |
> |
> | -------------------------------------------------------
> | This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> | Tool for open source databases. Create drag-&-drop reports. Save time
> | by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> | Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> | _______________________________________________
> | Snort-users mailing list
> | Snort-users () lists sourceforge net
> | Go to this URL to change user options or unsubscribe:
> | https://lists.sourceforge.net/lists/listinfo/snort-users
> | Snort-users list archive:
> | http://www.geocrawler.com/redir-sf.php3?list=ort-users
> |
> |
>
> - --
> Wes Young
> Network Secuity Analyst
> University at Buffalo
> GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (GNU/Linux)
>
> iD8DBQFB/jlP1M5o0FsrrbERAqyDAJ981klq6LR4eI8FlLdSKGdZV0+axQCfXvQ5
> xhTy7RwyfYvtHFAyxhpPafY=
> =21HH
> -----END PGP SIGNATURE-----
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> Tool for open source databases. Create drag-&-drop reports. Save time
> by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users






-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users