Re: Taking a traffic snapshot with network IDS

[vern () ee lbl gov]

> That said, an IDS can be turned into one heck of a nice data-gathering
> device if it's programmed to collect and report on events rather than
> to look specifically for intrusions. I.e.: a DNS logging signature
> set, URL logging signatures, DHCP logging, connectivity tracking,
> usage statistics, etc.

You might want to check out Bro in this regard, which IMHO excels at this
sort of information gathering/logging.  www.bro-ids.org

                Vern
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards