Michael F. Robbins on Tue, 26 Mar 2002 14:29:59 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] intrusion detection system


On Tue, 2002-03-26 at 14:12, Michael Whitman wrote:
> I am looking for a sniffer/intrusion detection system for my linux box.

http://www.snort.org/

It does hog a lot of processor time... on an older system you'll
definately feel it.  But its very configurable and there's an active
rule-making community.  "Rules" describe the characteristics of certain
suspicious packets, and what to do with them.

Michael F. Robbins
mike@gamerack.com



______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug