Open Source IDS/IPS for Windows

摘要

Snort is a useful network intrusion prevention and detection system. It also provides sniffing and packet logging capabilities. Here we see how to use it in Windows. Snort is a real-time network intrusion detection software. It can be configured to run in various modes such as: Sniffer, which simply reads packets off the network and displays them for you in a continuous strearn on the console (screen); Packet Logger, to log packets to disk; and NIDS, where you can match network traffic against a user defined rule set and perform several actions based on that.