RE: newbie quetsions

["zekker" <zekker () ivolution ca>]

Also look at the Prelude IDS.  It is a great tool also and like snort is
open source.  It also employs the SNORT rules sets when compiled with SNORT
support.  The nice thing about this IDS is that it is able to monitor log
files.

http://www.prelude-ids.org/

Richard Zaluski, CCNA, CRCP
CISO, Security and Infrastructure Services 
iVolution  Technologies Incorporated

905.309.1911
866.601.4678
905.524.8450 (Pager)
www.ivolution.ca
rzaluski () ivolution ca


-----Original Message-----
From: Andrey Todorov [mailto:andreyt () gawab com] 
Sent: Friday, December 24, 2004 10:08 AM
To: focus-ids () securityfocus com
Subject: newbie quetsions

Hi People,
I tried several times to subscribe myself to "Security Basics" mailing 
list to ask my questions, but didn't succeed. Excuse me if my questions 
aren't adequate to "Focus IDS" mailing list!

I'll be very gratefull if you share your opinion with me for the 
following situation. I have small network (5 PCs) behind one Linux box 
(iptables firewall , Pentium I 166Mhz, 32MB RAM, 4GB HDD) and want to 
increase security for this network.

    1. Do I need IDS?
    2. What do you think about Snort? Can I find easy maintainable 
free/opensource IDS then Snort?
    3. What IDS literature should I read?

Thank you in advance!

Andrey



--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------




--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------