A Discussion on Snort:the Tool of NIDS
Lin Yong-he · Computer Knowledge and Technology · 2006
With the rapid spread of internet among the people,the importance of the technology for network safety is becoming increasingly obvious.IDS(Instrusion Detection System) is just an important part of it,Based on the auditing IDS,NIDS can detect the abnormal happenings on internet by analyzing the information current,in a passive way,including the masthead of Data Pack and the data imformation.Snort,a Data Pack Detector based on libpcap,can be regarded as a lighter NIDS.This paper illustrates Snort(one of the tools of NIDS),including the detecting regulations,the structures of its functions and programs,and the comparison with other tools of NIDS.It aims at discussing the deficiencies of Snort and making a few suggestions to improve it so that others may come up with valuble opinions in the further researches.