Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 3 subscribers
  • Views 1651 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New version w/ Snort integration

eaustin
This may be above and beyond the task list associated with the integration of Snort but I'll shoot out the idea anyway.  A friend of mine has set up a Snort box which stores it's logs in a MySQL database.  There is a php interface that could be integrated into WebAdmin that allows admins to query the database for customized reports and enhanced search capabilities.  I know he did not develop any of this himself so the source code is out there.  If you'd like, I can get you some lnks if you feel this is a worthwile endeavor.

Eric


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to eaustin
    Hi all,

    If you go to http://www.snort.org  - you'll find it all. In their download page, there are several frontends to snort available.'

    Perhaps I've missed some info on the current intrusion detection system, but I've yet to see that it picks up anything besides false positives...

    So, needless to say perhps, I would very much like to see ASL implement Snort and a comprehensive reporting tool for it.

    Download page is at http://www.snort.org/downloads.html 

    Best regards,
    Ørjan Sandland
Children
  • 0 in reply to Orjan Sandland
    The link listed above does have everything necessary.  ACID was used as a frontend.  "logsnorter" is also available for download at that site.  It allows logging from iptables to be stored in a MySQL database as well.  If that were accomplished, there would be consistancy to the reporting architecture. 

    My 2 cents,
    Eric
Unfiltered HTML