Customroute Ltd - Independent Computer Consultants

Open Source - Snort

For detection Snort, uses both protocol analysis and pattern recognition techniques. It has one the largest signature bases of any IDS. This, combined with proactive development in terms of core functionality and modular plug-ins make it a very flexible and powerful option for organisations both large and small.

Essentially Snort analyses network traffic for common patterns of network misuse, and can record and alert suspicious behaviour via standard logging or by integration into variety of databases including MYSQL and Microsoft SQL. Snort utilises a simple and  flexible rule-based configuration facility, to perform protocol analysis and pattern matching. The real-time alerting mechanisms have the capability to be integrated into many third-party systems, such as  UNIX socket, WinPopup messages to Windows clients or OPSEC integration into Firewall-1for automatic responses .

Snort is an open-source product, and therefore is free. Customroute does not sell Snort. Rather we help our clients design, install, manage, and maintain Snort installations. 

If you are interesting in deploying Snort in your organization, require more information, or to wish to arrange for an informational, no-obligation meeting, please call +44 (0)7050 656867 or email security@customroute.com