[isalist] Re: IDS Questions

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 31 Mar 2009 11:04:13 -0700

http://www.ISAserver.org
-------------------------------------------------------

What do you want; a Snort replacement of a network traffic analysis tool like 
Netmon (they're different beasts)?
TMG can replace Snort as an IDS, except that you don't' have access to the GAPA 
signature language.


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ball, Dan
Sent: Tuesday, March 31, 2009 10:54 AM
To: 'isalist@xxxxxxxxxxxxx'
Subject: [isalist] OT: IDS Questions

http://www.ISAserver.org
-------------------------------------------------------
  
This is a bit off-topic, but I figured that if anyone would know it would be 
you guys...

I'm trying to find a suitable Windows-Based replacement for programs like 
Snort, as I get really-really sick of digging through tons of propaganda on 
configuration files to get a program working.  Looking at the program a bit, it 
seems like I should be able to do something similar to Snort with a basic 
program such as Network Monitor, but I haven't worked with the filters enough 
to be able to tell if I can do that or not.

So, two questions:
1. Can the functionality of Snort be done with Network Monitor?
2. What is the best Windows-Based program for doing IDS monitoring? (freeware 
preferably)

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: