In-Reply-To: <[EMAIL PROTECTED]>
Sorry for the late response,
Snort as an IDS is good it can also be used as sniffer, but it is not
reqd. here.
I suggest to go for snort because of the following features,
# It can be integrated with firewalls like (Checkpoint, PIX,etc.,)
# It performs good even the traffic @ 100Mbps is 90%
# Can write our own signatures, which is very easy (for a tech guy)
# Can be customized for our setup.
Only drawback of the using the same is, the user must have some tech
knowledge.
Hope am not out of the topic,
Thanks & Regards,
Raj
