Can simultaneously using 2 or more intrusion detection systems (IDS) on the same computer or network create conflicts ?
Talking about tools (as examples) such as but not limited to: tripwire, bro, aide, psad, rkhunter.
Thanks !
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this communityCan simultaneously using 2 or more intrusion detection systems (IDS) on the same computer or network create conflicts ?
Talking about tools (as examples) such as but not limited to: tripwire, bro, aide, psad, rkhunter.
Thanks !
Yes, according to my research you can use multiple IDS on the same computer simultaneously.
If you are paranoid and have sufficient free time to read all the email, you will be happy to hear that multiple HIDS tools running in parallel do not get in each other's way. In other words, you can run a combination of Tripwire, AIDE, AFICK, Samhain, and OSSEC on a single computer and let the systems monitor one another. But some caution is advised: Updates that arrive at the same time can easily send the system into an infinite loop. http://www.linux-magazine.com/Issues/2016/183/Host-Based-IDS/(offset)/3#article_i4