Description: Eagle X is an IDS environment using free software.

Snort IDS (www.snort.org) and IDScenter are the core of this distribution.

Apache server (www.apache.org), PHP (www.php.net), MySQL (www.mysql.com) and ACID (www.cert.org/kb/acid)
are used to see latest alerts in a nice front-end, using http authentication.

Platform: Windows NT/2000/XP
Version: 2.1

Author: U. Kistler

Features:
Full working IDS with database backend and PHP data analyzer frontend
o Snort IDS - powerfull intrusion detection system
o Apache webserver HTTP server, running PHP
o MySQL database - stable database server for storing Snort logs
o IDScenter configuration and management software for Snort
IDScenter
o control Snort easily using the wizards, e-mail notification feature, etc.
o Online updates of Snort ruleset
HTTP authentication
o Protects the webserver from unauthenticated access
o Basic authentication or Message Digest-5 Hash authentication possible
Snort IDS
o Running in service mode
o Preconfigured using Eagle X configuration tool to adapt to your system environment
Easy installation

Requirements:

AMD Athlon, Intel Pentium III or better
no MySQL server installed, because it will be replaced

Can i also make a note, its still a b-i-t-c-h to get a perfect ruleset... If your wanting in on IDS, concentrate on the ruleset first.

The GUI is nice, but once its working, most work i found was straight to the mysql db... add phpmyadmin to the list of proggies when playing with IDS ... IMHO

net send localhost "WARNING!!!"

go through your snort config and look for the Back Up Directory/DB location

verify the directory does exist (or doesnt in this case) and/or change create directory