Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks.
Features
Content searching and matching
Protocol analysis
Common attack and probe detection
Frontends
Snort is simply a network monitor, it doesn’t provide a sophisticated GUI through which to see and respond to security events. Several 3rd party open source projects fulfill this purpose however:
