Introducing Snort

- Snort is an open source IDS,…or Intrusion Detection System.…It is one of the most widely used, free IDS software.…Let's talk a little more about Snort.…First of all, Snort is an open source software.…However, some aspects of Snort are not free.…For example, some Snort rules…are only available to paid subscribers.…Snort can be run in different modes…including packet sniffer mode, IDS and IPS modes.…To download Snort, you just need to go to this website.…

Now, you see this Download menu?…Just click on the Download button…and you see Snort Stable Release right here.…They come in the form of the source files,…binaries, and in this case, all you need…is really a binary file.…In a packet sniffer mode, Snort is working passively,…meaning Snort simply collects packets in this case…without really analyzing them.…In an IDS mode, Snort still acts passively…but then it analyzes packets to detect…suspicious packets to alert users.…

In an IPS mode, Snort is more active in a sense that…it analyzes packets, detects suspicious packets…