Which IDS should I use?

• Snort

• www.snort.org

• Snort is a lightweight network intrusion detection

• system, capable of performing real-time traffic

• analysis and packet logging on IP networks. It can

• perform protocol analysis, content searching

• matching and can be used to detect a variety of

• attacks and probes, such as buffer overflows,

• stealth port scans, CGI attacks, SMB probes, OS

• fingerprinting attempts, and much more.

Notes: