On Sun, Jul 20, 2003 at 10:56:30AM +0200, Francesco wrote: > Now, i am asking this question: Portsentry seems a good network IDS, since a > possible attacker, by starting his initial system scan, is just blocked out!
EErr, that's not really how you can measure its quality. Nessus is
extremely noisy so any NIDS should at least figure out that something is
going on and that some host should be blocked.
-- Renaud
