BASE 1.4.5

BASE (Basic Analysis and Security Engine) is based on the code from the Analysis Console for Intrusion Databases (ACID) project and provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

BASE is a web interface to perform analysis of intrusions that snort has detected on your network. It uses a user authentication and role-base system, so that you as the security admin can decide what and how much information each user can see.

BASE also has a simple to use, web-based setup program for people not comfortable with editing files directly.

What's New in This Release: [ read full changelog ]

· Fixed moving alerts with empty sig_priority -- Kevin Johnson for Michel Lundell
· Added support for new chart type "unique alerts vs. number of alerts". Feature request no. 1659968 -- Juergen Leising
· Further fixes in the setup procedure -- Juergen Leising
· Disabled the pcap download possibility for sfportscan alerts, as these are just pseudo packets rather than real packets from the network. Answer to bug no. 1885673 -- Juergen Leising
· Workaround and fixes for the bugs reported under no. 1699443
· Same or at least similar problem as under no. 1699443 sub 1. seems to be the one reported in https://sourceforge.net/forum/forum.php?thread_id=2014650&forum_id=404428 Workaround. -- Juergen Leising
· Workaround for bug no. 1762491. Related to the last two points (if not identical) -- Juergen Leising
· Fix for bug no. 1974990 -- Juergen Leising
· Added information to the docs about how to fix a pear::image::graph library bug preventing legends from being displayed with pie charts -- Juergen Leisin...