Hi, Dan, Have you tried Bro? FYI, http://www.bro-ids.org/.
Regards On Mon, Jan 28, 2013 at 12:46 PM, Dan Ballance <[email protected]>wrote: > Hi guys and girls, > > If anyone had 30 seconds to spare to make a recommendation I'd be very > appreciative. > > I have tried to us Prelude in the past, but last time I looked, they had > fallen out with Snort :( > > I have also tried Sguil and got that working nicely with Security Onion ( > http://securityonion.blogspot.co.uk ) for a single machine but will need > something that can monitor network-wide. > > What are other folks out there using? Should I persevere with > hand-rolling Sguil myself or is there another system out there that I have > missed? > > thanks! > > > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ >
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
