(This small intrusion detection and prevention system excels at traffic analysis and IP packet logging. In addition to protocol analysis, content lookup, and many other pre-management programs, Snort can view thousands of worms, vulnerabilities, port scans, and other suspicious behaviors. Snort uses a simple rules-based language to describe network traffic, and to determine whether to pass or block network data, and its viewing engine is modular. BasicAnalysisandSecurityEngine(BASE), the engine for analyzing page patterns of Snort alerts, is available for free. The open source Snort provides outstanding services for yourself, small businesses, and corporate users. Its parent company, SourceFire, offers a wealth of enterprise-grade features and regular upgrades to enrich its product line. Offers (registration required) a 5-day free trial of the rules, you can also
EdgeSnort finds a lot of free rules.)
收藏
