nanog mailing list archives

Re: open source DPI suggestions?


From: Francois Menard <francois () menards ca>
Date: Fri, 6 May 2011 16:43:59 -0400


How about RouterOS from Mikrotik ?

You cannot beat a $70 RB750G for doing P2P hijacking.

F.

On 2011-04-29, at 8:59 AM, Kornelijus Survila wrote:

Snort (http://www.snort.org/) is also a nice IDS. They provide paid and free
rules/signatures.

-k

On Fri, Apr 29, 2011 at 7:55 AM, Raymond Burkholder <ray () oneunified net>wrote:

Can anyone suggest any open source DPI (deep packet inspection)
projects?


I'll recommend Bro-IDS (http://www.bro-ids.org/) as it's what I spend my
days working on.  It's essentially a programming language for long term
network traffic monitoring which is focused on doing deep decoding of
application layer protocols.  (and it's BSD licensed!)


http://l7-filter.sourceforge.net/ might be another candidate.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.






Current thread: