Hi guys and girls, If anyone had 30 seconds to spare to make a recommendation I'd be very appreciative.
I have tried to us Prelude in the past, but last time I looked, they had fallen out with Snort :( I have also tried Sguil and got that working nicely with Security Onion ( http://securityonion.blogspot.co.uk ) for a single machine but will need something that can monitor network-wide. What are other folks out there using? Should I persevere with hand-rolling Sguil myself or is there another system out there that I have missed? thanks!
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
