Re: BASE and Snorby running together

["Jefferson, Shawn" <Shawn.Jefferson () bcferries com>]

On the demo, I noticed that Snorby didn't seem to have the same functionality as the "Unique IP Links", and "Unique 
Alerts" that BASE has?  Maybe I just missed how to view alerts in that way?


________________________________
From: Dustin Webber [mailto:dustin.webber () gmail com]
Sent: February 22, 2012 12:41 PM
To: Jan Seidl
Cc: security-onion () googlegroups com; snort-users () lists sourceforge net
Subject: Re: [Snort-users] BASE and Snorby running together

Just curious.. What are the features that snorby does not have? Last time I checked snorby shadowed BASE in every area 
and then some.

- Dustin

On Feb 22, 2012, at 3:06 PM, Jan Seidl <lists () heavyworks net<mailto:lists () heavyworks net>> wrote:

Shane, have you tried sguil with squert?
On Feb 22, 2012 3:04 PM, "Castle, Shane" <scastle () bouldercounty org<mailto:scastle () bouldercounty org>> wrote:
------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!