[Snort-users] Passive or Active

Erick Mechler emechler at ...7719...
Fri Apr 4 09:52:05 EST 2003


:: Now, snort won't interfere with network apps, like say p2p, or just
:: complain about it?

It can do both!  But it still can't make coffee which is something I think 
has been seriously overlooked by the maintainers.

Ahem, anyway, most installations are passive, i.e., sniffer and/or NIDS
setup.  However, take a look at the flexresp code in snort, and the hogwash
project at http://hogwash.sourceforge.net/ if you want to do intrusion
prevention.

Cheers - Erick




More information about the Snort-users mailing list