Snort For Dummies covers everything the reader needs to: Learn why and how an IDS should be implemented Identify how Snort fits in to a security management environment Deploy Snort on Linux and Windows systems Understand and create Snort detection rules Generate reports with ACID and other tools Discover the nature and source of attacks real-time.
User review
run Snort on a linux machine
One would think sysadmins would not need a Dummies book on network protection. But apparently, some do appreciate a quick course, like that given here. It shows how Snort is available for all the main operating systems. Though the authors point out manifold advantages of running it under linux.
As in being able to reduce linux down to a minimal core system. This may be a significant consideration even if most of your machines are running Microsoft operating systems. Since your Snort machine needs to be as secure as possible. So throwing out optional linux packages reduces the risk of a serious bug in these compromising the machine. Plus, because you never know when your net might be attacked, Snort should run with as much uptime as possible. Routinely, linux boxes are capable of extended uptime. While in principle this is also true of Microsoft machines, in practice they tend to get rebooted far more often.
The book goes further into the actual usages of Snort. But you may want to consider the above as one of the best suggestions in the book.
User review
Great way to get your feet wet.
If you want to get your feet wet or you've been tasked with deploying a snort system, this is a good way to start. In the typical, humorous, `for dummies` style, this book walks you through getting, setting up and using Snort and the ACID console.
The book also covers how to maintain and tweak the system, once it is up and running. A good effort by the authors.
User review
Excellent Starter
This is a great book for getting startet on snort. I've used other NIDS, but never braved downloading Snort ofr Windows. This book not only provided very detailed step-by-step instructions it also detailed some very useful tools. I really like that its not OS-centric. And Snort's Great!
