What is a good book to learn how to use Snort, the open source network intrusion detection system?
Managing Security with Snort & IDS Tools gets pretty good reviews, here’s the description: This practical guide to managing network security covers reliable methods for detecting network intruders, from using simple packet sniffers to more sophisticated IDS (Intrusion Detection Systems) applications and the GUI interfaces for managing them. A comprehensive resource for monitoring illegal entry attempts, Managing Security with Snort and IDS Tools provides step-by-step instructions on getting up and running with Snort 2.1, and how to shut down and secure workstations, servers, firewalls, routers, sensors and other network devices. Plus, there’s a picture of a guy with an axe on the front.
