Re: Recommend good IDS? was Re: /dev/shm/r?
On Wed, Jun 3, 2009 at 5:53 PM, john <email@example.com> wrote:
> I'd be interested to hear some recommendations for IDS to run on
> internet facing servers. Especially from the point of view of ease of
> installation, ease of maintenance, quality of the tool, and ability to
> have it deliver really useful information to the admin. I've used
> SNORT a bit in the past and my feeling was that it was so chatty that
> it was actually hard to tell if something bad was happening or not.
We use aide.