I seem to remember seeing somewhere (on this list/on the web -- don't remember) that there was some ``Snort-like'' software that was available under the BSD license. Unfortunately, I'm unable to find any information about such software. Was I dreaming, or can anybody else jog my memory? :) Kind regards, Devon H. O'Dell
Quoting "Devon H. O'Dell" <dodell@sitetronics.com>:> I seem to remember seeing somewhere (on this list/on the web -- don't > remember) that there was some ``Snort-like'' software that was available > under the BSD license.SHADOW? http://www.nswc.navy.mil/ISSEC/CID/index.html But I don?t know what typ of License it use. HTH, -- Oskar
On Sun, 11 Jan 2004, Devon H. O'Dell wrote:> I seem to remember seeing somewhere (on this list/on the web -- don't > remember) that there was some ``Snort-like'' software that was > available under the BSD license. Unfortunately, I'm unable to find any > information about such software. Was I dreaming, or can anybody else > jog my memory? :)That one maybe: http://www.icir.org/vern/bro.html // Krzysztof Zaraska * kzaraska (at) student.uci.agh.edu.pl // http://mops.uci.agh.edu.pl/~kzaraska/ * http://www.prelude-ids.org/ // A dream will always triumph over reality, once it is given the chance. // -- Stanislaw Lem
On Wed, 21 Jan 2004 23:42:05 +0100 (CET) Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl> wrote: KZ> That one maybe: KZ> KZ> http://www.icir.org/vern/bro.html Isn't it dead? It is the same 0.8-without-doc as it has been 4 years ago. -- Alex.
(brought to my attention by colleagues, as I don't read this list)> KZ> That one maybe: > KZ> > KZ> http://www.icir.org/vern/bro.html > > Isn't it dead? It is the same 0.8-without-doc as it has been 4 years ago.Bro is far from dead, and is in fact gaining considerable momentum in a number of ways. The last release was Dec 16 2003, and the next one will be later this month. As for "without-doc", there's a 160 page manual available at http://www.icir.org/vern/bro-manual/index.html and http://www.icir.org/vern/bro-manual/manual.ps , though it hasn't been updated in a while and a lot has been added :-(. That said, I certainly admit that the lame web page referred to by KZ above doesn't help in conveying that Bro is alive & vital! There's a draft replacement page at http://www-nrg.ee.lbl.gov/bro.html, by the way. Vern
(resent having now subscribed)> KZ> That one maybe: > KZ> > KZ> http://www.icir.org/vern/bro.html > > Isn't it dead? It is the same 0.8-without-doc as it has been 4 years ago.Bro is far from dead, and is in fact gaining considerable momentum in a number of ways. The last release was Dec 16 2003, and the next one will be later this month. As for "without-doc", there's a 160 page manual available at http://www.icir.org/vern/bro-manual/index.html and http://www.icir.org/vern/bro-manual/manual.ps , though it hasn't been updated in a while and a lot has been added :-(. That said, I certainly admit that the lame web page referred to by KZ above doesn't help in conveying that Bro is alive & vital! There's a draft replacement page at http://www-nrg.ee.lbl.gov/bro.html, by the way. Vern