Snort 2.0 Intrusion Detection

"Why spend tens of thousands on an Intrusion Detection System? Snort is a powerful Network Intrusion Detection System that can provide enterprise wide sensors to protect your computer assets from both internal and external attack. Snort can put the information you need at your fingertips about any suspicious activity on your network. Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. The incredible low maintenance costs of Snort combined with it's powerful security features are making Snort one of the fastest growing IDSs within corporate IT departments."Caswell, Brian is the author of 'Snort 2.0 Intrusion Detection' with ISBN 9781931836746 and ISBN 1931836744.