InterSect Alliance - Open Source

Snare Agent for Irix

Snare for Irix provides front end filtering, remote control, and remote distribution for Irix audit data, interfacing with the underlying SGI "Security Audit Trail" (SAT/SATD).

Snare for Irix can be used as a standalone auditing tool, or can send data to the Snare Server for analysis and storage.

InterSect Alliance have developed software that interfaces with the Irix auditing subsystem to collect, and select audit log information based on a series of user-defined filters. The agent can then send the converted data back to a central location over the network (via UDP) in real-time, allowing security administrators to implement a centralised audit collection, analysis and archive facility with minimal audit client resource utilisation.

Snare for Irix also provides a remote control facility, and user account snapshot tool, via a micro embedded web server.

Snare is currently used by hundreds of thousands of individuals, and organisations worldwide. Snare for Irix is being developed for customers in the Financial, Defence, AeroSpace, and Intelligence organisations to meet elements of local and federal security requirements, such as:

ACSI 33
GLBA (Gramm-Leach-Bliley Act)
Sarbanes Oxley (SOX)
C2 / CAPP
DCID 6/3
DIAM 50-4
DDS-2600-5502-87 Chapter 4
NISPOM Chapter 8
HIPAA
PCIDSS
California Senate Bill 1386
USA Patriot Act
Danish Standard DS-484:2005

British Standard BS7799

Source code for Snare for Irix is available under the terms of the GNU Public Licence.

Screen Shots

Snare Micro-Web Server for Remote Control

Documentation

Documentation for Snare for Irix is available from our resources page

The Sourceforge development website shows support for the open source development community by providing SNARE with a home away from home, and Snare support forums.

Download

Snare for Irix	Binary Installation Package	Snare for Irix 1.4.1 (June 2010)
	Source Code	Snare source code is available from the Snare sourceforge page
	Other Tools	sat2text-1.1-beta.pl is a program by Karen Weiprecht @ The Johns Hopkins Applied Physics Lab, that is designed to take the output from snare & 'sat_interpret -l', and convert the resulting data into a format that can be easier to process & review. Karen monitors the snare sourceforge site, and will be happy to help you with any queries.

Like to keep up to date with Snare releases? Sourceforge offer an email notification service that will send you an email each time we release a new version of Snare. Click here to set this up.