Snort is our favorite window into seeing unwelcome activity on our network, whether it be port scans, stealth attacks, buffer overflows, or a variety of other mean-spirited hijinks. A new beta,
SnortSP (Snort Security Platform), introduces a shell-based user interface, native IPv6, MPLS and GRE support, and a multithreaded execution module to enhance the Snort product line. Add
BASE (Basic Analysis and Security Engine), and you have a Web-based front end to query and analyze Snort alerts as well as a role-based user authentication system to control user access to Snort data.
FULL REPORT ...