Re: [sentinix-list] ossim

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey!  Ossim looks *really* cool. This is definitely something I'll be testing 
out, correlation between snort, nessus, et al. is *exactly* what information 
security professionals need in order to understand the big picture. The 
website mentions that Ossim detects anomolies from collected data in a 
coordinated manner... it really doesn't seem to be able to get any better 
than this!  Get AlertCon in your private network! Exactly how it's supposed 
to be!

Thanks Chris Locke for bringing this to my attention! :)
	Michel

On Thursday 01 April 2004 19:30, Chris Locke wrote:
> Sorry guys I should have posted a link. It is the open source security
> information management.
>
> http://www.ossim.net/
>
> I don't really think it's a replacement. It just adds to it. I have just
> started playing with ossim, but it seems to be good at gathering data
> from snort/acid, ntop, nessus, and nmap, and giving you a centralized
> front end for keeping track of the data. It would be something cool to
> go along with nagios.
>
> Like I said though I have just started playing with it and am still
> trying to get it all figured out. I have it on a fedora box right now
> and once I get used to it may throw it on my sentinix box. I will post
> back if it does indeed seem to play nice with sentinix. I was really
> just curious if anybody else had already done this.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFAbFl0DsNYvU6O5AgRAuMdAJwK0FGcuz31DJ+0q/3PbijHmg2+FgCfcc2h
gwDSaAZ28UMl0dsVPXsAPS4=
=DHn6
-----END PGP SIGNATURE-----