Snort

Snort: A robust network intrusion detection and prevention system for real-time packet logging and traffic analysis on IP networks

A robust network intrusion detection and prevention system for real-time packet logging and traffic analysis on IP networks

Snort is an open source network intrusion prevention and detection system that is capable of searching/matching content and performing protocol analysis. The application can detect many types of attacks and probes like stealth ports scans, OS fingerprinting attempts, buffer overflows, SMB probes...etc.

It describes traffic that it should collect or pass using a flexible rules language. It also includes a detection engine relying on a modular plug-in architecture.

Snort includes a real-time alerting function with built-in mechanisms for syslog, a UNIX socket, a user specified file or WinPopup messages to Windows clients.

Snort can be used as a packet logger, packet sniffer or as a network intrusion prevention system.

Requirements:

- Winpcap 4.1.1