IDS/IPS Systems

Hi all,

This is just to get everyone's input on IDS/IPS systems that are in use. I have been asked to take a look at different systems and do a quick 1 2 on differencies.

I thought a good starting point would be to see what our community are currently using....

Thanks in advance

Currently using Snort.

I'm snorting too

IPCop with Snort

I use Wireshark at work, formly known as Ethereal. I have been wanting to play with Snort for quite some time.

Here is a really good link on the top 100 Security Tools. You'll notice the top 3 are Nessus, Wireshark, and Snort.

Link:
sectools.org/

ZiPPy

cisco 4240's in non-inline mode performing IDS.

In my opinion, it's not about what you're using for IDS, but how you analyze the traffic and tweak your filters. IDS/IPS is all about knowing your network traffic and balancing the false positives against the amount of time you have to analyze the traffic.