Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -3 down vote favorite

I'm looking for free IDS that sniffs to traffic in real time.. Can anyone help me !

share|improve this question
This question isn't really a good candidate for the Q&A format. It doesn't have enough information, and is soliciting opinions rather than answers. – Xander Mar 6 at 10:10

closed as not constructive by GdD, Lucas Kauffman, symcbean, Terry Chia, M'vy Mar 6 at 14:28

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.

1 Answer

up vote 0 down vote

sophist, similar to your previous question on IPTables more details are required about what OS you are using. This will allow the answers to be specific.

But that said, you should take a look at SNORT. It is pretty much the industry standard open source IDS, its free, you can write custom rules and there is a big community to help out with any issues you may encounter.

http://www.snort.org/

share|improve this answer
what about etherape ? In fact, SNORT take much time for installation ! – sophist Mar 6 at 9:53
etherape is not an IDS, it simply shows network activity. SNORT will alert you when it detects malicious traffic or something triggers a rule. – fixulate Mar 6 at 9:59
Okay.. I have 3 ports i want to survey.. what rules should i implement in SNORT , THANK YOU – sophist Mar 6 at 10:27
2  
Obviously you haven't got even the slightest clue what you are doing, hire a consultant. – Lucas Kauffman Mar 6 at 11:38

Not the answer you're looking for? Browse other questions tagged or ask your own question.