The Snare BackLog is a program that provides a central collection facility for a variety of log sources, including Snare Agents for Windows, Solaris, AIX, Irix, ISA Server, IIS Server, Apache, Lotus Notes (and others), plus any device capable of sending data to a syslog server.

Epilog for Windows is a program that facilitates the central collection and processing of Windows text-based log files. Epilog for Windows also supports date stamped log files such as IIS, ISA, SMTP and Exchange message tracking logs. Log information is converted to tab delimited text format, then delivered over UDP to a remote server.

Snare Epilog for UNIX text files provides a remote distribution facility for any text based log files and is currently available for the Solaris and Linux operating systems. SnareApache and SnareSquid are plugins for Epilog to specifically target Apache and Squid logs respectively. Please see the User Guide for more information.

As regular users of the Linux operating system, the team at InterSect Alliance believe that one of the key missing features that is holding Linux back from deployment in large organisations, particularly those with significant security requirements, is the availability of host based intrusion detection systems - ie: system auditing or event logging facilities.

Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating sysystem. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and storage.

Snare for Windows provides front end filtering, remote control, and remote distribution for Windows eventlog data.

Formerly known as BackLog, Snare for Windows interfaces into the Windows EventLog / Windows auditing subsystem. It can be used as a standalone event log auditing tool, or can send data to the Snare Server, or a SYSLOG server, for analysis and storage.

Snare for Solaris provides front end filtering, remote control, and remote distribution for Solaris audit data, interfacing with the underlying C2/CAPP-style Sun "Basic Security Module".

Snare for Solaris can be used as a standalone auditing tool, or can send data to the Snare Server for analysis and storage.

Snare for Irix provides front end filtering, remote control, and remote distribution for Irix audit data, interfacing with the underlying SGI "Security Audit Trail" (SAT/SATD).

Snare for Irix can be used as a standalone auditing tool, or can send data to the Snare Server for analysis and storage.

Snare for AIX provides front end filtering, remote control, and remote distribution for AIX audit data, interfacing with the underlying AIX audit subsystem as a custom stream object.

Snare for AIX can be used as a standalone auditing tool, or can send data to the Snare Server for analysis and storage.

Snare for Tru64 provides a remote distribution tool for Tru64 audit data, interfacing with the underlying Tru64 audit subsystem using audit_tool.

Snare for Tru64 is designed to send data to the Snare BackLog, or Snare Server, for analysis and storage.

Snare for Lotus Notes provides a remote distribution, and configuration checking tool for the Lotus Notes application, interfacing with the underlying Notes "log.nsf" file, and user/group and access control application programming interfaces.

Snare for Notes can send data to either a syslog server, or the Snare Server for analysis and storage.

Snare for Squid has now been replaced by our Epilog agents.

Snare for Apache has now been replaced with our Epilog for Unix and Windows agents.

Snare for Internet Information Server has been replaced by our Epilog agents. Epilog is capable of integrating with IIS W3C logs, Exchange SMTP Server logs, MS FTP Service Logs, MS NNTP Server logs, and Chat Server logs, amongst others.

Snare for Internet Security and Acceleration Server has been replaced by our Epilog agents.