Snort 2.1 Intrusion Detection, Second Edition

Snort 2.1 Intrusion Detection, Second Edition

by Brian Caswell, Jay Beale
Released June 2004
Publisher(s): Syngress
ISBN: 9780080480992

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

Called "the leader in the Snort IDS book arms race" by Richard Bejtlich, top Amazon reviewer, this brand-new edition of the best-selling Snort book covers all the latest features of a major upgrade to the product and includes a bonus DVD with Snort 2.1 and other utilities.

Written by the same lead engineers of the Snort Development team, this will be the first book available on the major upgrade from Snort 2 to Snort 2.1 (in this community, major upgrades are noted by .x and not by full number upgrades as in 2.0 to 3.0). Readers will be given invaluable insight into the code base of Snort, and in depth tutorials of complex installation, configuration, and troubleshooting scenarios. Snort has three primary uses: as a straight packet sniffer, a packet logger, or as a full-blown network intrusion detection system. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes. Snort uses a flexible rules language to describe traffic that it should collect or pass, a detection engine that utilizes a modular plug-in architecture, and a real-time alerting capability. A CD containing the latest version of Snort as well as other up-to-date Open Source security utilities will accompany the book.

Snort is a powerful Network Intrusion Detection System that can provide enterprise wide sensors to protect your computer assets from both internal and external attack.

* Completly updated and comprehensive coverage of snort 2.1
* Includes free CD with all the latest popular plug-ins
* Provides step-by-step instruction for installing, configuring and troubleshooting

Table of contents

  1. Cover (1/3)
  2. Cover (2/3)
  3. Cover (3/3)
  4. Contents (1/4)
  5. Contents (2/4)
  6. Contents (3/4)
  7. Contents (4/4)
  8. Foreword
  9. Intrusion Detection Systems (1/11)
  10. Intrusion Detection Systems (2/11)
  11. Intrusion Detection Systems (3/11)
  12. Intrusion Detection Systems (4/11)
  13. Intrusion Detection Systems (5/11)
  14. Intrusion Detection Systems (6/11)
  15. Intrusion Detection Systems (7/11)
  16. Intrusion Detection Systems (8/11)
  17. Intrusion Detection Systems (9/11)
  18. Intrusion Detection Systems (10/11)
  19. Intrusion Detection Systems (11/11)
  20. Introducing Snort 2.1 (1/10)
  21. Introducing Snort 2.1 (2/10)
  22. Introducing Snort 2.1 (3/10)
  23. Introducing Snort 2.1 (4/10)
  24. Introducing Snort 2.1 (5/10)
  25. Introducing Snort 2.1 (6/10)
  26. Introducing Snort 2.1 (7/10)
  27. Introducing Snort 2.1 (8/10)
  28. Introducing Snort 2.1 (9/10)
  29. Introducing Snort 2.1 (10/10)
  30. Installing Snort (1/14)
  31. Installing Snort (2/14)
  32. Installing Snort (3/14)
  33. Installing Snort (4/14)
  34. Installing Snort (5/14)
  35. Installing Snort (6/14)
  36. Installing Snort (7/14)
  37. Installing Snort (8/14)
  38. Installing Snort (9/14)
  39. Installing Snort (10/14)
  40. Installing Snort (11/14)
  41. Installing Snort (12/14)
  42. Installing Snort (13/14)
  43. Installing Snort (14/14)
  44. Inner Workings (1/4)
  45. Inner Workings (2/4)
  46. Inner Workings (3/4)
  47. Inner Workings (4/4)
  48. Playing by the Rules (1/10)
  49. Playing by the Rules (2/10)
  50. Playing by the Rules (3/10)
  51. Playing by the Rules (4/10)
  52. Playing by the Rules (5/10)
  53. Playing by the Rules (6/10)
  54. Playing by the Rules (7/10)
  55. Playing by the Rules (8/10)
  56. Playing by the Rules (9/10)
  57. Playing by the Rules (10/10)
  58. Preprocessors (1/16)
  59. Preprocessors (2/16)
  60. Preprocessors (3/16)
  61. Preprocessors (4/16)
  62. Preprocessors (5/16)
  63. Preprocessors (6/16)
  64. Preprocessors (7/16)
  65. Preprocessors (8/16)
  66. Preprocessors (9/16)
  67. Preprocessors (10/16)
  68. Preprocessors (11/16)
  69. Preprocessors (12/16)
  70. Preprocessors (13/16)
  71. Preprocessors (14/16)
  72. Preprocessors (15/16)
  73. Preprocessors (16/16)
  74. Implementing Snort Output Plug-Ins (1/14)
  75. Implementing Snort Output Plug-Ins (2/14)
  76. Implementing Snort Output Plug-Ins (3/14)
  77. Implementing Snort Output Plug-Ins (4/14)
  78. Implementing Snort Output Plug-Ins (5/14)
  79. Implementing Snort Output Plug-Ins (6/14)
  80. Implementing Snort Output Plug-Ins (7/14)
  81. Implementing Snort Output Plug-Ins (8/14)
  82. Implementing Snort Output Plug-Ins (9/14)
  83. Implementing Snort Output Plug-Ins (10/14)
  84. Implementing Snort Output Plug-Ins (11/14)
  85. Implementing Snort Output Plug-Ins (12/14)
  86. Implementing Snort Output Plug-Ins (13/14)
  87. Implementing Snort Output Plug-Ins (14/14)
  88. Dealing with the Data (1/13)
  89. Dealing with the Data (2/13)
  90. Dealing with the Data (3/13)
  91. Dealing with the Data (4/13)
  92. Dealing with the Data (5/13)
  93. Dealing with the Data (6/13)
  94. Dealing with the Data (7/13)
  95. Dealing with the Data (8/13)
  96. Dealing with the Data (9/13)
  97. Dealing with the Data (10/13)
  98. Dealing with the Data (11/13)
  99. Dealing with the Data (12/13)
  100. Dealing with the Data (13/13)
  101. Keeping Everything Up to Date (1/6)
  102. Keeping Everything Up to Date (2/6)
  103. Keeping Everything Up to Date (3/6)
  104. Keeping Everything Up to Date (4/6)
  105. Keeping Everything Up to Date (5/6)
  106. Keeping Everything Up to Date (6/6)
  107. Optimizing Snort (1/12)
  108. Optimizing Snort (2/12)
  109. Optimizing Snort (3/12)
  110. Optimizing Snort (4/12)
  111. Optimizing Snort (5/12)
  112. Optimizing Snort (6/12)
  113. Optimizing Snort (7/12)
  114. Optimizing Snort (8/12)
  115. Optimizing Snort (9/12)
  116. Optimizing Snort (10/12)
  117. Optimizing Snort (11/12)
  118. Optimizing Snort (12/12)
  119. Mucking Around with Barnyard (1/16)
  120. Mucking Around with Barnyard (2/16)
  121. Mucking Around with Barnyard (3/16)
  122. Mucking Around with Barnyard (4/16)
  123. Mucking Around with Barnyard (5/16)
  124. Mucking Around with Barnyard (6/16)
  125. Mucking Around with Barnyard (7/16)
  126. Mucking Around with Barnyard (8/16)
  127. Mucking Around with Barnyard (9/16)
  128. Mucking Around with Barnyard (10/16)
  129. Mucking Around with Barnyard (11/16)
  130. Mucking Around with Barnyard (12/16)
  131. Mucking Around with Barnyard (13/16)
  132. Mucking Around with Barnyard (14/16)
  133. Mucking Around with Barnyard (15/16)
  134. Mucking Around with Barnyard (16/16)
  135. Active Response (1/14)
  136. Active Response (2/14)
  137. Active Response (3/14)
  138. Active Response (4/14)
  139. Active Response (5/14)
  140. Active Response (6/14)
  141. Active Response (7/14)
  142. Active Response (8/14)
  143. Active Response (9/14)
  144. Active Response (10/14)
  145. Active Response (11/14)
  146. Active Response (12/14)
  147. Active Response (13/14)
  148. Active Response (14/14)
  149. Advanced Snort (1/6)
  150. Advanced Snort (2/6)
  151. Advanced Snort (3/6)
  152. Advanced Snort (4/6)
  153. Advanced Snort (5/6)
  154. Advanced Snort (6/6)
  155. Index (1/5)
  156. Index (2/5)
  157. Index (3/5)
  158. Index (4/5)
  159. Index (5/5)
  160. Related Titles

Product information

  • Title: Snort 2.1 Intrusion Detection, Second Edition
  • Author(s): Brian Caswell, Jay Beale
  • Release date: June 2004
  • Publisher(s): Syngress
  • ISBN: 9780080480992