- Paperback: 768 pages
- Publisher: Syngress (April 10, 2007)
- Language: English
- ISBN-10: 1597490997
- ISBN-13: 978-1597490993
- Product Dimensions: 8 x 1.5 x 10 inches
- Shipping Weight: 2.4 pounds (View shipping rates and policies)
- Average Customer Review: 4.3 out of 5 stars See all reviews (14 customer reviews)
- Amazon Best Sellers Rank: #280,936 in Books (See Top 100 in Books)
Enter your mobile number or email address below and we'll send you a link to download the free Kindle App. Then you can start reading Kindle books on your smartphone, tablet, or computer - no Kindle device required.
To get the free app, enter your email address or mobile phone number.
Snort IDS and IPS Toolkit (Jay Beale's Open Source Security)
Use the Amazon App to scan ISBNs and compare prices.
Frequently Bought Together
Customers Who Bought This Item Also Bought
More About the Author
Top Customer Reviews
SIAIT looks impressive page-wise, but it suffers from the multiple-author, no-editing, rush-to-production problems unfortunately inherent in many Syngress titles. One would think that including many contributing authors (11, apparently) would make for a strong book. In reality, the book contributes very little beyond what appears in "Snort 2.1," despite the fact that "only" chapters 8, 10, 11, and 13 appear to be repeats or largely rehashes of older material. Comparing to "Snort 2.1," these compare to old chapters 7, 10, 12, and 11, respectively.
The absolute worst part of this book is the re-introduction of all the outdated information in chapters 8 and 10. It is 2007 and we are STILL reading on p 353 that XML output is "our favorite and relatively new logging format" and on p 367 that "Unified logs are the future of Snort reporting." (I cited both of these as being old news in Jul 04!) I should note that these chapters are not entirely duplicates; if you compare output such as that on page 335 of "Snort 2.1" with page 365 in SIAIT you'll see the author replaced the original 2003 timestamps with 2006! This is the height of lazy publishing.Read more ›
Description of Chapters:
1) Intrusion Detection Systems - A nice overview of some basics
2) Introducing Snort 2.6 - Fairly comprehensive coverage of the product
3) Installing Snort 2.6 - Good coverage of the different options.
4) Configuring Snort Add-Ons (I don't recommend snort on Windows, but whatever)
5) Inner Workings - One of the best chapters on how snort really works
6) Preprocessors - Another great chapter on the inner workings.
7) Playing by the Rules - Good coverage of snort rule syntax.
8) Snort Output Plug-Ins - Another good chapter
9) Exploring IDS Event Analysis Snort Style - Some of these add-ons are a bit dated, but it's nice to have it all in one place.
10) Optimizing Snort - Principles of Snort optimization...
11) Active Response - More useful options
12) Advanced Snort - Not much of use here for most people.
13) Mucking Around with Barnyard - It's good to at least know what Barnyard is.
At 700 plus pages, this is the best collection of Snort info around.
I will review this book when I complete my graduate course in a few weeks.
Most Recent Customer Reviews
Great product! This is something that quality is a must and it was provided. Will buy again! Right price, fast service!Published 23 months ago by Peter Walker
I was taking a IDS/IPS class and I bought this book on the side. I was trying to get some insight into the Information Security world. Read morePublished on January 27, 2014 by howardsinc
This book is confusing to say the least. The material is not really explained for a beginner. Definitely could be better.Published on July 16, 2013 by Christina L. Parker
This book is a good tool to help understand how snort works and what that features are. I used it for my IDS class and learned a lot from it.Published on May 14, 2013 by Amazon shopper