On Thu, Jun 15, 2006 at 10:02:49AM +0700, riwanlky wrote: > Hi Guys, > > I am going to install IDS for my firewall. According to this message > snort have problem, is there any alternative IDS? Is there any IPS?
I've heard good things about Bro-IDS <http://www.bro-ids.org>. It's not in ports, though, and does share all the intrinsic problems of an IDS with Snort. I've never tried it myself, though. Snort-inline will work as an IPS on Linux boxes. Joachim