Thanks Negative...mucho appreciatto.


For the record, I'm curious as to what host OS people choose for Snort because I'm investigating possible IDS evasion techniques. There is a wealth of information floating around, but I'm specifically interested in 'target saturation' techniques.

Meaning, attacking the IDS system itself. To better understand possible/theoretical approaches before moving into my laboratory, I wanted to see what the most common host for Snort is/was/etc...

Thanks again to all who participate!

Cheers,
<0