[Snort-users] Passive or Active
emechler at ...7719...
Fri Apr 4 09:52:05 EST 2003
:: Now, snort won't interfere with network apps, like say p2p, or just
:: complain about it?
It can do both! But it still can't make coffee which is something I think
has been seriously overlooked by the maintainers.
Ahem, anyway, most installations are passive, i.e., sniffer and/or NIDS
setup. However, take a look at the flexresp code in snort, and the hogwash
project at http://hogwash.sourceforge.net/ if you want to do intrusion
Cheers - Erick
More information about the Snort-users