Kevin asked me to write a bit about LinuxWorld, and BASE's appearance
Hopefully by now you know that BASE/Sguil/Snort made an appearance at
LinuxWorld in San Francisco a couple weeks ago, and even though we
were in the .org pavilion (which this year was moved upstairs, away
from the main floor, a controversial move I have heard). Anywho..
I demonstrated BASE to everyone who would listen to my voice and
showed it off on my super advanced 286 machine here at the house, and
even with 10,000 events in the DB, it had a good showing. (Yes, I
let everyone know that it was running on a 286)
Many people who came to the booth were familiar with BASE and it's
use, and the most common response to every question was "Well, I used
ACID". Well, not only did I recommend they upgrade from ACID, but so
did David Bianco (Sguil), Nigel Houghton (Sourcefire VRT), and Marty
Roesch. In fact I think Marty's comment was "If you're using ACID
you need to upgrade to BASE".
On the final day there, we were bum rushed by some reporters..
(Linux Magazine, BusinessWeek, ComputerWorld...) and we had a couple
guys that write for various websites come on over. This guy Mark
Sobell, writes for bookpool.com and took a picture of us.. http://
The picture is the middle one on the left, I'm on the left, Nigel
Houghton is in the background, and Jennifer Steffens is on the
right. As you can see in the background is BASE on the 20 in monitor
we had there at the booth.
Overall we had a good time, BASE and Snort got loads of public
attention, and hopefully we got a few more users as a result of it.