Need a simple-to-use yet highly flexible intrusion detection package? If so, look no further than Snort. This Linux utility might be just what you need for network traffic monitoring, and Jim McIntyre ...
I've spent years with the Snort intrusion detection system. It's often a love/hate relationship as I massage the rules in order to get to meaningful and actionable data. Often it comes down to parsing ...