RazorBack

If you're looking for a log analysis program that comes packed with real-time visual notifications and interfaces with the SNORT open source Intrusion Detection System then RazorBack is the software you need to check out. This program is specifically designed to help you detect when an intrusion signature has been detected on the network. All you need to do is configure Snort to send data to syslog so that RazorBack can display it.

RazorBack is an open source tool that can be downloaded for free and is available under the terms of the GNU Public Licence. InterSect Alliance, the creators of RazorBack, welcome contributions from other authors and thank Tomas Junnonen, creator of the FireStarter tool for providing the initial code skeleton.

This software has been developed to work within the GNOME framework on Unix platforms. The requirements needed for RazorBack to run are simply SNORT 1.8+.

In the newest version of RazorBack, which has been developed under the arjuna IDE, there's been a complete rewrite including a new glade-based interface. Instead of depending on syslog, RazorBack now operates off /var/log/snort/alert, and can detect and react to log file rotations.

In summary, RazorBack is a powerful and reliable software that can help you prevent security threats from harming your network with its real-time visual notifications and interface with SNORT. It's an open source tool available for free under the GNU Public Licence, and it's designed to work seamlessly on Unix platforms.