IDS for Unix

From: Baron Biza (baron.biza_at_gmail.com)
Date: 06/30/05

  • Next message: Stef: "Re: IDS for Unix" 
    Date: Thu, 30 Jun 2005 01:10:31 +0300
To: focus-ids@securityfocus.com

    Hello, Im new in this list, I never used IDS, I want start with one
    for Unix (FreeBSD and Linux also), I know about Snort but there are a
    lot of rules to configure by hand,, the WIndows users of Snort have a
    program in graphic mode to configure their Snort, but we not :-(, is
    there any IDS good,with the same level,in graphic mode,or easiest to
    learn?,thnx,good luck.

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------

  • Next message: Stef: "Re: IDS for Unix"

    Relevant Pages

    • Re: Value of "richer" signatures?
      ... Snort, Dragon, and NFR, and I can tell you that they ... Here's an example of how the newer IDS signatures help ... Let's say you are using a simple packet grepping IDS ... > an FTP connection). ...
      (Focus-IDS)
    • Re: ids inquisition
      ... Subject: ids inquisition ... Snort isn't one of them. ... Brian Caswell - CSV output plugin, ... Christian Lademann - active response, ...
      (Focus-IDS)
    • RE: IDS recommendations
      ... Subject: IDS recommendations ... Snort is a relatively raw tool and that usually adds ... >> I can appreciate your comments on the ISS product. ...
      (Focus-IDS)
    • RE: "Free" IDS
      ... I am very surprised noone mentioned Demarc PureSecure IDS solution. ... It cost less than 2000.00 and it runs off of the snort engine and has a big ... if you want to learn snort then just read up on it. ...
      (Focus-IDS)
    • Re: IDS Opinions
      ... > options then the best fit will be Snort or CA. Snort is a freeware with ... Works on Linux machine. ... your chosen platform to run the IDS on. ... > in low range loads only and requires high CPU and memory. ...
      (Focus-IDS)