[Intrusions] IDS & snort !!

[Gasper, Rick]

Try this for first time setup (windows only) I use it for a security
class I teach.

http://www.engagesecurity.com/products/eaglex/

Rick Gasper
Manager Network Services
King's College
Wilkes-Barre PA 18711
rjgasper at kings.edu
PH:  570-208-5845
Fax: 570-208-6072

-----Original Message-----
From: intrusions-bounces at lists.sans.org
[mailto:intrusions-bounces at lists.sans.org] On Behalf Of Kenneth Williams
Sent: Monday, June 07, 2004 11:32 AM
To: Intrusions List (GCIA Practicals)
Subject: Re: [Intrusions] IDS & snort !!

Try ACID. It ships with the SNORT distro and simply requires an
appropriate
DB such as mysql.In the *nix distro it is located in the source package
under the contrib directory.
Ken
----- Original Message ----- 
From: "Mohammad M. Al-Kurbi" <malkorbi at isu.net.sa>
To: <intrusions at incidents.org>
Sent: Monday, June 07, 2004 3:04 AM
Subject: [Intrusions] IDS & snort !!


> Dear all ...
>
>   I am seeking your experience on the best tools that works with
snort,
> and would build a full IDS.
>
>   Snort would do: Sniffing + Detection + Alerting.
>
>   I would like to know the proper tools (From your experience) that
helps
> to complete the cycle:
>
> - Monitoring Console (GUI).
> - Forensic Tools (If available).
> - Reporting facilties.
>
>
> Best Regards ...
>
> _______________________________________________
> Intrusions mailing list
> Intrusions at lists.sans.org
> http://www.dshield.org/mailman/listinfo/intrusions

_______________________________________________
Intrusions mailing list
Intrusions at lists.sans.org
http://www.dshield.org/mailman/listinfo/intrusions