Specifications

Guide to Snare for Linux

Some of the key features of the Snare Server include:

• Ability to collect any arbitrary log data, either via UDP or TCP

• Secure, encrypted channel for log data using TLS/SSL

• Proven technology that works seamlessly with the Snare agents

• Snare reflector technology that allows for all collected events to be sent, in real time, to a

standby/backup Snare Server, or a third party collection system

• Ability to continuously collect large numbers of events. Snare Server collection rates

exceed 60,000 events per minute using a low end, workstation class, Intel based PC on a

100Mbps network.

• Ability to drill down from top level reports. This reduces the amount of data “clutter” and

allows a system administrator to fine tune the reporting objectives.

• Ability to 'clone' existing objectives in order to significantly tailor the reporting criteria.

These reports, along with all Snare Server objectives, may be scheduled and emailed to

designated staff.

• The Snare Server uses extensive discriminators for each objective, allowing system

administrators to finely tune reporting based on inclusion or exclusion of a wide variety of

parameters.

• Very simple download and installation

• Flexibility when dealing with unique customer requirements

• A strategic focus on low end hardware means that Snare can achieve outstanding results

with minimal hardware cost outlay

• Snare gives you useful data, out of the box, with default objectives tuned for common

organisational needs

• Ability to manage Enterprise Agents

• All future Snare Server versions and upgrades included as part of an annual maintenance

fee.

The Snare Server is an appliance solution that comes packaged with a hardened, minimal version of

the Linux operating system to provide baseline computing functionality, which means you do not

need to purchase additional operating system licenses, database licenses, or install additional

applications in order to get up and running. Like your android phone, or your home router, any

operating-system level management and maintenance is either automated, or is available within the

web-based interface.

For further information on the Snare Server refer to the Snare Server User Guide on the Intersect

Alliance website.