An intrusion detection system – or IDS – is a high-tech burglar alarm, keeping a watchful eye on your computer and alerting when computer or network activity indicates unauthorised or malicious ...

In a column about syslog [see “syslog Configuration” in the December 2001 issue of LJ] I mentioned “stealth logging”--by running your central log server without an IP address, you can hide your ...

One indication that an idea's time has come is when two publications on the topic arrive at the same time. Based on the two titles reviewed here, it's apparent that Snort is going mainstream. These ...

So I'm configuring snort, and it will NOT recognize that I have mySQL installed.<BR><BR>I tried ./configure --with-mysql and it says it can't find the header file (mysql.h). Fair enough, I find the ...

Snort, with its funny name, has three primary operating modes. The first two are not really intrusion-related and merely reads network packets received and displays them on-screen or to disk. In these ...