Jello wrote:

Acidus wrote:
I rant one of my co-workers had this morning.

(11:28:02) ---: no IDS company actually has that poor of a product
(11:28:15) ---: if you can get passed that dont be impressed
(11:28:35) ---: it can only find stuff that is directed at itself
(11:28:47) ---: and thats only some of the time
(11:29:10) ---: hearing the word snort depresses me
(11:29:26) ---: its like yelling Jesus is the lord to muslims
(11:29:37) ---: for folks that actually did IDS work
(11:29:53) ---: [earphones]
(11:29:55) ---: ahhhh

You saying snort sucks and can only detect intruders that throw packets at it?

I make no statements regarding the suckworthyness of Snort. I just found Howard's rant funny.

I will said I was rather disappointed with Snort when I saw a Toorcon demo last month. The presenter took an exploit Snort detects and modified the exploit so it was sent over 2 packets instead of 1. Snuck it right past Snort.

RE: AIM @ Work: Part 1