In a column about syslog [see “syslog Configuration” in the December 2001 issue of LJ] I mentioned “stealth logging”--by running your central log server without an IP address, you can hide your ...

Snort is often referred to as a lightweight intrusion detection system. Snort is labeled lightweight because it is designed primarily for small network segments. Snort is very flexible due to its rule ...

Need a simple-to-use yet highly flexible intrusion detection package? If so, look no further than Snort. This Linux utility might be just what you need for network traffic monitoring, and Jim McIntyre ...

Snort, with its funny name, has three primary operating modes. The first two are not really intrusion-related and merely reads network packets received and displays them on-screen or to disk. In these ...

In a league with Linux, Apache, PHP and other foundational free and open source software, Snort has become (to quote them about themselves) "...the standard in ...