Printable View
I've recently started looking into snort. After a little playing around with the command line I would like to take a look at some GUI's.
After some initial searching I see BASE is a popular choice.
I'd like to get some feedback on what other forum members are using currently using.
Any suggestions?
Thanks in advance!
BASE will pretty much do everything you need. I have BASE embedded into my Cacti Installation so that I only have one place to stop to monitor just about everything on my network.Quote:
Originally Posted by prelate
That sounds like exactly the setup I'm looking for. Thanks Streaker.
Also, might not be exactly what you're looking for if you want only a Snort GUI, but you might want to check out the OSSIM project:)
pfsense also has a GUI for Snort administration; makes managing the rules very easy, however I found pfsense and ossim to be somewhat bloated.
BASE is probably what you need.
Bloated software in *nix? are you a heathen? ;)Quote:
Originally Posted by swc666
You can get burned at the stake while penguins dance for saying such things.
Great... now I'm going to have nightmares (again) :mad:Quote:
Originally Posted by streaker69
On another note... I've been thinking about developing a BASE addon to manage rules / rulesets. Anyone know of such a thing that exists already?
I thought there was something like that in the Snort repo. Check out Snort's download section.Quote:
Originally Posted by swc666
for a "quick and dirty" build, i would go with snort-base plus ntop.
OSSIM is not a bad choice in my opinion, but it does need a lot of work to setup and install.
Though it's nagged, there's a free licens for trial.
Try out Aanval from aanval.com, nice work guys. Not perfect by far but really nice work.