Snort Forums Archive

Archive Home » Third Party Tools » Best/Fav non-web based analysis tool

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Best/Fav non-web based analysis tool

Posted by Newsted on July 04, 2005 11:09:43

Looking for opinions on analysis tools that do not require Apache/IIS Perl, etc to get going with.

My client needs a point and click interface that can give them an overview of whay is going on in their small business network (15 ppl)

Posted by chris on July 05, 2005 15:29:21

Hi Newstead, have you had a look at snortalog ?
as far as I'm aware it doesn't need a web server to view the reports, although it does use perl to generate the reports, so i'm not it's just a point & click deal, but it might fill your needs.
The home page is here - http://jeremy.chartier.free.fr/snortalog/
hope this helps,
Chris

Posted by pandemic on July 09, 2005 09:02:21

I used to give my clients SAM (http://sourceforge.net/projects/snortalertmon/) if they really wannted to keep an eye on things. Super easy to use, cross-platform, works better if the db and SAM are on the same lan since it has to make the the db queries remotely over the net.

florian