Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 3813

Snort is an open source network intrusion detection and prevention system (NIDS/NIPS).

17 votes

Can installing Snort make me vulnerable?

You must balance the additional risk you add by installing Snort against the costs of any treatment for that risk you might implement and the benefits of installing it. … We can't do that for you because we don't know your threat model or why you want to install Snort. …
Graham Hill's user avatar
  • 15.6k
10 votes
Accepted

Testing Snort IDS installation

Is Snort working in the sense that it's running, able to sniff trafic, testing it against the rules, and alerting you when one is triggered? … Using a "fake" rule is a perfectly valid test that Snort is working in the first sense. And it's easier. Easy tests are good. …
Graham Hill's user avatar
  • 15.6k
3 votes
Accepted

Enterprise IDS - Deployment & Uses

I'm going to answer both your questions in a kinda non-specific way, but bear with me. Your first question is "I'm putting in an IDS, what should I tell it to do?" Well, you're doing it backwards, b …
Graham Hill's user avatar
  • 15.6k