Performance Comparison of Open Source IDSs via Raspberry Pi
Mustafa Coşar, Harun Emre Kıran · 2018
Some measures can be taken by analyzing network traffic on small and medium-sized computer networks and using open source intrusion detection systems (IDS) on embedded microprocessor hardware instead of high-capacity firewalls in the attack detection phase. At this stage, Raspberry Pi and open source IDSs are the first to come to mind because of the cheap and easy installation. In this research, a scenario is created on a local network to listen to the network traffic and Snort and Suricata are installed on two different Raspberry Pi, to compare the performance of the IDSs. For this purpose, hping attacks have been made by a user and IDSs have been trying to obtain the performance of catching packets.