Slashdot Mirror


Using Snort Stealthily

jukal writes "Linux Journal has an article on using Snort as stealth sniffer, a stealth NDIS probe and stealth loger -- on a network interface with no IP address. 'Snort is a versatile and powerful tool for sniffing, intrusion detection and packet logging. Configuring it to run stealthily in sniffing mode or NIDS mode is easy; incorporating it into a stealth-logging solution is only slightly less so'"

2 of 148 comments (clear)

  1. Snort is okay by Anonymous Coward · · Score: -1, Troll

    But you are much better off using something like ISS' RealSecure, which feeds into either workgroup manager or their new flagship product, Site Protector. With that, you can dump all your events into a superior MS SQL 2000 server for event correlation, queries, and forensics. You can also tie together your intrusion detection with your vulnerability assessment so, if you see a bunch of a certain kind of attack, you can automatically launch a vulnerability assessment with just that attack to ensure you have everything protected (and to make sure that there isn't a new development or test box sitting there insecure since you had no inkling of its existence).

  2. Re:Even more simple ... by Anonymous Coward · · Score: -1, Troll
    Well, well, well...
    dicknuts is at it again. Let's take a look at what he has to say and determine whether or not he is a cock-knocker. As we can see in this post by vofka, he loves men. He longs to have their poles inside of him. Now, I do not mention this because I hate homosexuals (although I do) but merely because we should take his thoughts on firewalls with a grain of salt. I mean, this guy is a flamer - of course he's going to be pro-firewall. Get it faggots? That's clever shit right there. Fuck you anyway.

    I was at Church yesterday, praying to the one true god in order to gain salvation for myself and asking that Muslims worldwide be plagued with bleeding dick disease when a thought occurred to me. This Slashdot user is not only a gay muslim but also has been a member in the ongoing conspiracy to eat shit from phone booths. That bothers me quite a bit.

    Having blasted forth a foul bit of gas onto Vofka's mother's face, I now feel better. I will drop a load on her boobies and take a nap (after kicking the bitch to the curb.)