Re: Re: log monitoring/analysis/correlation systems

[jlehman () mail esignal com]

you might also look at ossec. it is open source and does event correlation, although I haven't tested it myself, i do 
plan to give it a shot. This was highlited ina a sans webcast by Mike Poor

http://www.ossec.net/

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------