Sagan with Prelude support
"Champ Clark III [Softwink]" <[email protected]> Wed, 10 Nov 2010 11:33:18 -0500
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
--===============5418223019351711652==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="HcAYCG3uE/tztfnV"
Content-Disposition: inline
--HcAYCG3uE/tztfnV
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hello all,=20
I've recently added Prelude support into Sagan. What is Sagan? Sagan is
a log analysis and correlation engine, but with a twist. Sagan uses
'Snort like' rule sets and can log information to Snort database (MySQL/
PostgreSQL). Since Sagan uses 'Snort like rules, its compatible with
Snort rule management utilities (oinkaster, pulledpork, etc). Sagan is=20
written in C and is multi-threaded (pthreads). It's built to be as=20
efficient as possible.
Right now, Sagan with Prelude support is only in the SVN tree. For=20
information about the Sagan SVN tree, please see:
https://wiki.softwink.com/bin/view/Main/SaganSVN
The upcoming Sagan 0.1.7 will have Prelude support built in. That'll=20
probably be released in a few days after further testing.=20
For more general information about Sagan, please see:
http://sagan.softwink.com
For screen shots with of Prelude/Prewikka & Sagan, check out:
http://sagan.softwink.com/screenshots.html
Prelude/Prewikka screen shots are at the bottom of the page.=20
I'd also like to say 'thank you' for the libprelude project. The API=20
was extremely useful and easy to follow. The Prelude team did a really=20
good job on it. =20
Let me know if you have any questions, comments, etc. Thanks again.
--=20
Champ Clark III | Softwink, Inc | 800-538-9357 x 101
http://www.softwink.com
GPG Key ID: 58A2A58F
Key fingerprint =3D 7734 2A1C 007D 581E BDF7 6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.
--HcAYCG3uE/tztfnV
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
iEYEARECAAYFAkzayU4ACgkQDx9lX1iipY9z6gCffWhvNjkaddkZA+Ug9yJJXlI6
zIUAn0HBUdRrthv4n1f4V5q6Yv98hxwX
=Jmsu
-----END PGP SIGNATURE-----
--HcAYCG3uE/tztfnV--
--===============5418223019351711652==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user
--===============5418223019351711652==--