[Dshield] IPS/IDS solutions--your opinions?

[Mar Matthias Darin]

Hello, 

Pete Cap writes: 

> I love Snort but in my experience it doesn't scale well.  Managing 150 Intrushield sensors is easy.  Managing 150 Snort boxes...not so much.

Agreed. This has also been my biggest show-stopper as well.  I manage way 
too many machines to spend all day transfering sig files then logging in to 
each of them to reset the IDS.  I specifically look for software that I can 
clusterize as it make my job a lot easier and faster. 

 --- 

Logger:  Taking control of system logs.
http://freshmeat.net/projects/slogger/