Questions about this topic? Sign up to ask in the talk tab.
Difference between revisions of "Snort"
From NetSec
(No difference)
|
Revision as of 06:28, 6 December 2010
Snort is a NIDS, or Network IDS. It uses the pcap library to read packets and is complete with its own traffic analysis engine as well as multiple preprocessing engines. It can be used to identify segmentation and fragmentation overwrite attacks as well as a myriad of attacks against hosts including buffer overflows and web exploitation.
