Snort is a powerful open source intrusion detection system (IDS). What surprises me is how many security people have never touched it to learn more about how IDS works -- or how easy it is to evade ...

I've spent years with the Snort intrusion detection system. It's often a love/hate relationship as I massage the rules in order to get to meaningful and actionable data. Often it comes down to parsing ...

I let my intern upgrade the rules to the snort box and now it's hosed when I start it I get this<BR><BR><pre class="ip-ubbcode-code-pre"> ERROR: /etc/snort/snort.conf ...