Designed to fill the gap left by expensive, heavy-duty network intrusion detection systems, Snort is a free, cross-platform packet sniffer, logger, and intrusion detector for monitoring smaller TCP/IP ...
I've spent years with the Snort intrusion detection system. It's often a love/hate relationship as I massage the rules in order to get to meaningful and actionable data. Often it comes down to parsing ...