Book details of 'Snort Cookbook'

Title	Snort Cookbook
Author(s)	Angela Orebaugh
ISBN	0596007914
Language	English
Published	March 2005
Publisher	O'Reilly Media, Inc.

---

Back to shelf Computer security
Amazon.com info for Snort Cookbook

Score:

Vote for this book

The Virtual Bookcase Reviews of 'Snort Cookbook':

Reviewer Rob Slade wrote:
Chapter one covers the installation of Snort on various systems, and even includes a wiring diagram for a passive tap, if you need that sort of application. (The "cookbook" format, with its "Problem/Solution" structure, seems a bit odd, in this case.) An assortment of issues in logging are dealt with in chapter two. The creation and maintenance of rules, in chapter three, is discussed in a very useful fashion. Chapter four is about preprocessing, and is somewhat more demanding of the reader. Administrative tools, for managing Snort sensors, rulesets, and data, are described in chapter five, while utilities for analysis and display of collected information are presented in six. A variety of additional uses for Snort are mentioned in chapter seven. This book outlines the basic use and operation of Snort in a convenient and easy-to-use manner. Aside from the first chapter, the cookbook format is used effectively, and thus the work becomes a handy, quick reference for those interested in using and exploring Snort. copyright Robert M. Slade, 2005
Add my review for Snort Cookbook

Book description:

If you are a network administrator, you're under a lot of pressure to ensure that mission-critical systems are completely safe from malicious code, buffer overflows, stealth port scans, SMB probes, OS fingerprinting attempts, CGI attacks, and other network intruders. Designing a reliable way to detect intruders before they get in is an essential--but often overwhelming--challenge. Snort, the defacto open source standard of intrusion detection tools, is capable of performing real-time traffic analysis and packet logging on IP network. It can perform protocol analysis, content searching, and matching. Snort can save countless headaches; the new Snort Cookbook will save countless hours of sifting through dubious online advice or wordy tutorials in order to leverage the full power of SNORT. Each recipe in the popular and practical problem-solution-discussion O'Reilly cookbook format contains a clear and thorough description of the problem, a concise but complete discussion of a solution, and real-world examples that illustrate that solution. The Snort Cookbook covers important issues that sys admins and security pros will us everyday, such as: * installation * optimization * logging * alerting * rules and signatures * detecting viruses * countermeasures * detecting common attacks * administration * honeypots * log analysis But the Snort Cookbook offers far more than quick cut-and-paste solutions to frustrating security issues. Those who learn best in the trenches--and don't have the hours to spare to pore over tutorials or troll online for best-practice snippets of advice--will find that the solutions offered in this ultimate Snort sourcebook not only solve immediate problems quickly, but also showcase the best tips and tricks they need to master be security gurus--and still have a life.