Hello, Is portsentry not just more of a port monitor -- to let you know who is "knocking" at your door. Where snort will monitor the actual traffic on the pipe. Michael. On Sun, 18 Apr 2004 18:49:29 +0100 David Cannings <lists@xxxxxxxxx> wrote: > On Sunday 18 April 2004 18:29, IT Clown wrote: > > What intrusion detection software would you guys > > recommend?Is psad or portsentry any good? > > Personally I use Snort (http://www.snort.org) which I find to be easy to > configure and fairly flexible. The default rulesets are quite concise > and daily reports give a good summary of what is happening. > > However, I haven't used either psad or portsentry so couldn't compare. > > David > > > > > -- Michael Gale Network Administrator Utilitran Corporation
