Snort Cookbook

If you are a network administrator youre under a lot of pressure to ensurethat missioncritical systems are completely safe from malicious code bufferoverflows s... » 

If you are a network administrator youre under a lot of pressure to ensurethat missioncritical systems are completely safe from malicious code bufferoverflows stealth port scans SMB probes OS fingerprinting attempts CGIattacks and other network intruders. Designing a reliable way to detectintruders before they get in is an essentialbut often overwhelmingchallenge. Snort the defacto open source standard of intrusion detectiontools is capable of performing realtime traffic analysis and packet loggingon IP network. It can perform protocol analysis content searching andmatching. Snort can save countless headaches the new Snort Cookbook will savecountless hours of sifting through dubious online advice or wordy tutorials inorder to leverage the full power of SNORT. Each recipe in the popular andpractical problemsolutiondiscussion OReilly cookbook format contains a clearand thorough description of the problem a concise but complete discussion of asolution and realworld examples that illustrate that solution. The SnortCookbook covers important issues that sys admins and security pros will useveryday such as installation optimization logging alerting rulesand signatures detecting viruses countermeasures detecting common attacks administration honeypots log analysis But the Snort Cookbook offers farmore than quick cutandpaste solutions to frustrating security issues. Thosewho learn best in the trenchesand dont have the hours to spare to pore overtutorials or troll online for bestpractice snippets of advicewill find thatthe solutions offered in this ultimate Snort sourcebook not only solveimmediate problems quickly but also showcase the best tips and tricks theyneed to master be security gurusand still have a life. «