Snort Cookbook: Solutions and Examples for Snort Administrators

If you are a network administrator, you're under a lot of pressure to ensure that mission-critical systems are completely safe from malicious code, buffer overflows, stealth port scans, SMB probes, OS fingerprinting attempts, CGI attacks, and other network intruders. Designing a reliable way to detect intruders before they get in is an essential—but often overwhelming—challenge. Snort, the defacto open source standard of intrusion detection tools, is capable of performing real-time traffic ...