Subject: CVS commit: pkgsrc/security/base
From: Adrian Portelli
Date: 2006-01-03 22:09:44
Message id: 20060103210944.1411D2DA27@cvs.netbsd.org

Log Message:
The Basic Analysis and Security Engine (BASE) is a PHP-based analysis
engine to search and process a database of security events generated by
various IDSes, firewalls, and network monitoring tools.  The features currently
include:

o Query-builder and search interface for finding alerts matching
  on alert meta information (e.g. signature, detection time) as well as
  the underlying network evidence (e.g. source/destination address, ports,
  payload, or flags).

o Packet viewer (decoder) will graphically display the layer-3 and
  layer-4 packet information of logged alerts

o Alert management by providing constructs to logically group alerts
  to create incidents (alert groups), deleting the handled alerts or
  false positives, exporting to email for collaboration, or archiving of
  alerts to transfer them between alert databases.

o Chart and statistic generation based on time, sensor, signature, protocol,
  IP address, TCP/UDP ports, or classification


Files:
RevisionActionfile
1.1importpkgsrc/security/base/PLIST
1.1importpkgsrc/security/base/DESCR
1.1importpkgsrc/security/base/distinfo
1.1importpkgsrc/security/base/Makefile
1.1importpkgsrc/security/base/MESSAGE
1.1importpkgsrc/security/base/options.mk
1.1importpkgsrc/security/base/files/base.conf
1.1importpkgsrc/security/base/patches/patch-aa