In a column about syslog [see “syslog Configuration” in the December 2001 issue of LJ] I mentioned “stealth logging”--by running your central log server without an IP address, you can hide your ...

Snort, with its funny name, has three primary operating modes. The first two are not really intrusion-related and merely reads network packets received and displays them on-screen or to disk. In these ...

In a league with Linux, Apache, PHP and other foundational free and open source software, Snort has become (to quote them about themselves) "...the standard in ...

Snort is often referred to as a lightweight intrusion detection system. Snort is labeled lightweight because it is designed primarily for small network segments. Snort is very flexible due to its rule ...