2006-11-15 22:33:51 +01:00
|
|
|
Sguil (pronounced "sgweel") is a graphical interface to snort
|
|
|
|
|
(www.snort.org), an open source intrusion detection system.
|
|
|
|
|
The actual interface and GUI server are written in tcl/tk
|
|
|
|
|
(www.tcl.tk). Sguil also relies on other open source software
|
|
|
|
|
in order to function properly.
|
|
|
|
|
|
2008-05-03 15:22:16 +02:00
|
|
|
The client requires tls, gpg, iwidgets and other tcl packages and may
|
|
|
|
|
also use wireshark and festival depending on your selection
|
2006-11-15 22:33:51 +01:00
|
|
|
of options. Run "make config" in the port to see what options
|
|
|
|
|
are available.
|
|
|
|
|
|
2008-05-03 15:22:16 +02:00
|
|
|
Sguil currently functions as an analysis interface and does not yet
|
|
|
|
|
have rule management capabilities.
|
2006-11-15 22:33:51 +01:00
|
|
|
|
|
|
|
|
WWW: http://sguil.sourceforge.net/index.php
|
|
|
|
|
pauls@utdallas.edu
|
