RECOMMENDATION on IDS for Home USE

**cartools** · January 22nd, 2004, 04:31 AM

What type of Intrusion Detection System Program can I use at home, in order for me to study the concept and working of it? Is there a free software for this?

**dublix** · January 22nd, 2004, 04:34 AM

You can use which ever you want I reckon. Take a gander here: http://www.insecure.org/tools.html

**Fatphantom** · January 22nd, 2004, 05:19 AM

me to study the concept and working of it?

Open Source IDS-

http://www.onlamp.com/
http://www.snort.org/

qod made some tutorials on Snort.. Might want to check his tuts out.

**anjali** · January 22nd, 2004, 05:35 AM

Snort is a great tool......

U can also download the IDSCenter....A front end tool for running snort......

Apart from above Symantec has its own suite of Host based IDS....

If willing to spend money(@40 dollars) try BlackICE™ PC Protection. BlackICE PC Protection features both an intrusion detection system and a personal firewall.

More info on http://blackice.iss.net/product_pc_protection.php

**qod** · January 22nd, 2004, 05:10 PM

Snort is best, but do you have security on your network or are you just put the IDS in. If you do not have security on your home network then the IDS will render worthless, start slow and study some good packet sniffers such as DSniff, Etherape, and TCPDump.

***RoadClosed*** · January 22nd, 2004, 06:24 PM

You can run snort in packet sniff mode, that way you learn both sides and dig into a great product at the same time. It's good to try a few though, I agree.

**CT2600** · January 22nd, 2004, 06:56 PM

Has anyone looked into the program Tripwire? I used to have a honeypot set up that would alert me via e-mail through the software Tripwire. My friend helped me clean up the project a lot. It was kind of sloppy the way I had it first configured, but it has become more stable and a great learning tool.

**S3cur|ty4ng31** · January 23rd, 2004, 12:15 AM

I might be biased because I really like open-sourced snort but Id have to say Demarc PureSecure is the best thing you can get and its free for home use. Ive been using it for a long time now and I am extemely happy with it. They dont offer it with snort 2.1 though. They seem to be using the 2.0 branch. This might be something they offer to paying customers but I have no idea. It also has host based intrusion detection so it can so the same things as tripwire. Its amazing how some things are free (ie snort and puresecure) and there so much better than products you have to pay for.
heres a link.
http://www.demarc.com

ps. Has anyone used Sentarus? not like I can afford it Im just curious how it compares to puresecure

***Computernerd22*** · January 23rd, 2004, 05:50 AM

What type of Intrusion Detection System Program can I use at home, in order for me to study the concept and working of it? Is there a free software for this?

Here are some links for Commerical and Freeware Intrusion Detection Systems

www.iss.net
www.nfr.com
www.cai.com
www.symantec.com
www.enterasys.com/ids
www.cisco.com

Hope these helps Computer Nerd22

**S3cur|ty4ng31** · January 23rd, 2004, 10:20 PM

Are any of these actually free? Or is it just a free time evaluation versions?

Thread: RECOMMENDATION on IDS for Home USE

Thread Tools

Display

RECOMMENDATION on IDS for Home USE

Posting Permissions