Every month Richard Bejtlich, founder of TaoSecurity and intrusion detection expert, shows value-added resellers (VARs) and systems integrators how to use the open source IDS Snort. Bookmark this page and come back often for new tips.
Snort IDS upgrade and tips on the Snort.conf file
Details on upgrading to Snort 2.6.1.2 and discussion on functions enabled by default in the snort.conf file -- such as IP ranges, ports of interest and preprocessors.
Snort IDS rules
Familiarize yourself with Sourcefire and Bleeding Edge Threats (BET) Snort rules.
Output options for Snort data
Output options are necessary to produce meaningful Snort data. Learn the capabilities and limitations of different features.
Working with unified output
You can improve Snort's performance by using unified output. This tip demonstrates how to use Barnyard, a popular unified output reader.
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.
