Enter your mobile number or email address below and we'll send you a link to download the free Kindle App. Then you can start reading Kindle books on your smartphone, tablet, or computer - no Kindle device required.

  • Apple
  • Android
  • Windows Phone
  • Android

To get the free app, enter your mobile phone number.

Snort IDS and IPS Toolkit (Jay Beale's Open Source Security)

4.3 out of 5 stars 14 customer reviews
ISBN-13: 978-1597490993
ISBN-10: 1597490997
Why is ISBN important?
ISBN
This bar-code number lets you verify that you're getting exactly the right version or edition of a book. The 13-digit and 10-digit formats both work.
Scan an ISBN with your phone
Use the Amazon App to scan ISBNs and compare prices.
Have one to sell? Sell on Amazon
Buy used On clicking this link, a new layer will be open
$6.75 On clicking this link, a new layer will be open
Buy new On clicking this link, a new layer will be open
$38.12 On clicking this link, a new layer will be open
More Buying Choices
42 New from $31.43 37 Used from $6.75
Free Two-Day Shipping for College Students with Prime Student Free%20Two-Day%20Shipping%20for%20College%20Students%20with%20Amazon%20Student


Windows10ForDummiesVideo
Windows 10 For Dummies Video Training
Get up to speed with Windows 10 with this video training course from For Dummies. Learn more.
$38.12 FREE Shipping. In Stock. Ships from and sold by Amazon.com. Gift-wrap available.
click to open popover

Frequently Bought Together

  • Snort IDS and IPS Toolkit (Jay Beale's Open Source Security)
  • +
  • Practical Intrusion Analysis: Prevention and Detection for the Twenty-First Century: Prevention and Detection for the Twenty-First Century
Total price: $86.11
Buy the selected items together
NO_CONTENT_IN_FEATURE

The latest book club pick from Oprah
"The Underground Railroad" by Colson Whitehead is a magnificent novel chronicling a young slave's adventures as she makes a desperate bid for freedom in the antebellum South. See more

Product Details

  • Paperback: 768 pages
  • Publisher: Syngress (April 10, 2007)
  • Language: English
  • ISBN-10: 1597490997
  • ISBN-13: 978-1597490993
  • Product Dimensions: 8 x 1.5 x 10 inches
  • Shipping Weight: 2.4 pounds (View shipping rates and policies)
  • Average Customer Review: 4.3 out of 5 stars  See all reviews (14 customer reviews)
  • Amazon Best Sellers Rank: #664,468 in Books (See Top 100 in Books)

Customer Reviews

Top Customer Reviews

Format: Paperback
Syngress published "Snort 2.0" in Mar 03, and I gave it a four star review in Jul 03. Syngress followed with "Snort 2.1" in May 04, and I gave it a four star review in Jul 04. I recommend reading those reviews, since the latest edition -- "Snort IDS and IPS Toolkit" (SIAIT) -- makes many of the same mistakes as its predecessors. Worse, it includes material that was already outdated in BOTH previous editions. If you absolutely must buy a book on Snort, this edition is your only real choice. Otherwise, I would stick with the manual and online articles.

SIAIT looks impressive page-wise, but it suffers from the multiple-author, no-editing, rush-to-production problems unfortunately inherent in many Syngress titles. One would think that including many contributing authors (11, apparently) would make for a strong book. In reality, the book contributes very little beyond what appears in "Snort 2.1," despite the fact that "only" chapters 8, 10, 11, and 13 appear to be repeats or largely rehashes of older material. Comparing to "Snort 2.1," these compare to old chapters 7, 10, 12, and 11, respectively.

The absolute worst part of this book is the re-introduction of all the outdated information in chapters 8 and 10. It is 2007 and we are STILL reading on p 353 that XML output is "our favorite and relatively new logging format" and on p 367 that "Unified logs are the future of Snort reporting." (I cited both of these as being old news in Jul 04!) I should note that these chapters are not entirely duplicates; if you compare output such as that on page 335 of "Snort 2.1" with page 365 in SIAIT you'll see the author replaced the original 2003 timestamps with 2006! This is the height of lazy publishing.
Read more ›
2 Comments 37 people found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse
Format: Paperback Verified Purchase
I have run Snort at previous jobs and currently run it at home. I found the book to be packed with tons of valuable information and a great reference for tweaks you may want to make to your install down the road as your needs change. The only down side is that it's already "out of date" as far as current versions go. It's not so out of date that the information is irrelevant but just keep that in mind and make sure to read up on new features and bugs compared to what is listed in the book and the version you are installing.
Comment 6 people found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse
Format: Paperback
This is the best single book on Snort I've come across, so I bought it. I used it as reference recently to customize a Snort configuration including writing a few custom rules. It has a really good index. It can be used as an in-depth tutorial or good quality reference.

Description of Chapters:
1) Intrusion Detection Systems - A nice overview of some basics
2) Introducing Snort 2.6 - Fairly comprehensive coverage of the product
3) Installing Snort 2.6 - Good coverage of the different options.
4) Configuring Snort Add-Ons (I don't recommend snort on Windows, but whatever)
5) Inner Workings - One of the best chapters on how snort really works
6) Preprocessors - Another great chapter on the inner workings.
7) Playing by the Rules - Good coverage of snort rule syntax.
8) Snort Output Plug-Ins - Another good chapter
9) Exploring IDS Event Analysis Snort Style - Some of these add-ons are a bit dated, but it's nice to have it all in one place.
10) Optimizing Snort - Principles of Snort optimization...
11) Active Response - More useful options
12) Advanced Snort - Not much of use here for most people.
13) Mucking Around with Barnyard - It's good to at least know what Barnyard is.

At 700 plus pages, this is the best collection of Snort info around.
Comment 7 people found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse
Format: Paperback Verified Purchase
The product description does not mention that as of 2012, the CD is no longer included. The companion website is listed on the book's back cover as [...]

I will review this book when I complete my graduate course in a few weeks.
Comment One person found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse
Format: Paperback Verified Purchase
I needed this as a textbook and I am pleased with it. I think it is full of information and is a great reference. It is a book I won't be selling back.
Comment 2 people found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse
Format: Paperback Verified Purchase
Excellent overview of SNORT for those with little experience on the subject. Easy to read. Lots of examples. I would definitely recommend this book to others.
Comment One person found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse
Format: Paperback Verified Purchase
I was taking a IDS/IPS class and I bought this book on the side. I was trying to get some insight into the Information Security world. The author goes way into how the signature detection engine works, like under the hood stuff. I just needed to know the syntax to configure a particular snort rule that would trigger when someone searched for what ever I would define and where to save it in Linux. I was working with security onion at the time. Over all this book was not a big help to me. Might be a better book for someone that wants to write a IDS program like snort. This book is not for beginners learning on there own.
Comment Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again
Report abuse

Set up an Amazon Giveaway

Snort IDS and IPS Toolkit (Jay Beale's Open Source Security)
Amazon Giveaway allows you to run promotional giveaways in order to create buzz, reward your audience, and attract new followers and customers. Learn more about Amazon Giveaway
This item: Snort IDS and IPS Toolkit (Jay Beale's Open Source Security)