[Snort-users] Using more than 1 IDS?

Jerry Shenk jas at ...129...
Thu Jul 20 23:22:25 EDT 2000


Using it with portsentry works great.  Since snort runs in promiscuous mode,
it will event detect 'problem traffic' from machines that are blocked by
ipchains.

----- Original Message -----
From: "Emil Soleyman-Zomalan" <emil79 at ...124...>
To: <snort-users at lists.sourceforge.net>
Sent: Thursday, July 20, 2000 5:06 PM
Subject: [Snort-users] Using more than 1 IDS?


> Hello,
>
> I have been using Snort for a while now and think that it is a great
> piece of software!
>
> I would like to know if it is possible to effectively use Snort in
> conjunction with Psionic's Portsentry or any other IDS for that matter?
> What problems might arise because of this? What are the disadvantages?
> What are the advantages?
>
> I appreciate any comments and/or suggestions.
>
> Thanks,
> Emil Soleyman-Zomalan
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users





More information about the Snort-users mailing list