Intrusion Detection System

It is used to monitor traffic or activity on a network or host for signs
of intrusion etc.  You will not get very far in your investigation
without hearing about Snort for both Unix and NT, simply because it is
excellent.  Demarc will also grace your screen in many a google search
before too long.
Quick pointers for further investigation,

Network based tools used for IDS:
Snort
Demarc
------- also note
Tcpdump
Etherpeek
Ethereal
IPWatcher

Host based IDS tools:
Tripwire
regmon
MD5 tools

stuck to think of more at the moment sorry.
Good luck.

Trevor



-----Original Message-----
From: Gerard Fremaint [mailto:[EMAIL PROTECTED]]
Sent: 10 March 2002 03:26
To: [EMAIL PROTECTED]
Subject: IDS


what is an IDS ?






******************************************************************************

This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. 

If you have received this message in error please notify SYSNET Ltd., at
telephone no: +353-1-2983000 or [EMAIL PROTECTED]

******************************************************************************

Reply via email to