Re: General Snort Help!

[Saad Kadhi <saad () docisland org>]

On Tue, Jan 21, 2003 at 09:56:02PM -0500, Erek Adams wrote:
> [...snip...]
>
> In my opinion, in order of need/usefulness:
>
> TCP/IP Illustrated, Volume 1 The Protocols by W. Richard Stevens
>      ISBN 0201633469
>
> Network Intrusion Detection An Analyst's Handbook by  Stephen Northcutt
>      ISBN 0735708681
>
> Intrusion Signatures and Analysis by Stephen Northcutt
>      ISBN 0735710635
>
> Intrusion Detection by Rebecca G. Bace
>      ISBN 1578701856
I'd add "The  practical  Intrusion  Detection  Handbook"  from  Paul  E.
Proctor. ISBN 0-13-025960-8, Prentice Hall.

though the author calls snort a "shareware", it contains a lot  of  good
information and is a good primer for the field. my fav part is Chapter 6
"Intrusion Detection Myths".

cheers.
-- 
Saad Kadhi -- [saad () docisland org] [saad.kadhi () hapsis fr]
[pgp keyid: 35592A6D http://pgp.mit.edu]
[pgp fingerprint: BF7D D73E 1FCF 4B4F AF63  65EB 34F1 DBBF 3559 2A6D]
---


-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users