Skip over navigation to the main content.

Intrusion Detection with SNORT: Advanced IDS Techniques Using SNORT, Apache, MySQL, PHP, and ACID

Links

To facilitate your exploration of Snort, we are providing links to the online resources listed in the reference section at the end of each chapter.

Chapter 1 Introduction to Intrusion Detection and Snort

Intrusion detection FAQ at http://www.sans.org/newlook/resources/IDFAQ/ID_FAQ.htm
Honey Pot Project at http://project.honeynet.org//
Snort FAQ at http://www.snort.org/docs/faq.html
Honeyd Honey Pot at http://www.citi.umich.edu/u/provos/honeyd/
Winpcap at http://winpcap.polito.it/
Cisco systems at http://www.cisco.com/
Checkpoint web site at http://www.checkpoint.com/
Netscreen at http://www.netscreen.com/
Netfilter at http://www.netfilter.org/
Snort at http://www.snort.org/
The Nmap tool at http://www.nmap.org/
Nessus at http://www.nessus.org/
MySQL database at http://www.mysql.org/
ACID at http://www.cert.org/kb/acid/
Apache web server at http://www.apache.org/

Chapter 2 Installing Snort and Getting Started

Snort web site at http://www.snort.org/
SNMP information at http://www.simpletimes.com/
Winpcap Library at http://winpcap.polito.it/
Apache web server at http://www.apache.org/
Argus Network Security Services Inc. at http://www.argusnetsec.com/
Libpcap is available from http://www-nrg.ee.lbl.gov/
Libnet at http://www.packetfactory.net/
RFC 792 at ftp://ftp.isi.edu/in-notes/rfc792.txt
RFC 791 at at ftp://ftp.isi.edu/in-notes/rfc791.txt
SAMBA at http://www.samba.org/

Chapter 3 Working with Snort Rules

Classless Inter-Domain Routing or CIDR. RFC 1519 at http://www.rfc-editor.org/rfc/rfc1519.txt
Transmission Control Protocol RFC 793 at http://www.rfc-editor.org/rfc/rfc793.txt
User Datagram Protocol RFC 768 at http://www.rfc-editor.org/rfc/rfc768.txt
The nmap at it web site http://www.nmap.org/
The Internet Protocol RFC 791 at http://www.rfc-editor.org/rfc/rfc791.txt
The Internet Control Message Protocol at http://www.rfc-editor.org/rfc/rfc792.txt
Assigned Numbers RFC 1700 at http://www.rfc-editor.org/rfc/rfc1700.txt
Oinkmaster at http://www.algonet.se/~nitzer/oinkmaster/
Open NMS at http://www.opennms.org/
Internet Corporation for Assigned Names and Numbers (ICANN) at http://www.icann.org/
The arachnids web site at http://www.whitehats.com/info/IDS/
The securityfocus mailing list archive at http://online.securityfocus.com/archive/1/

Chapter 4 Plugins, Preprocessors and Output Modules

Classless Inter-Domain Routing or CIDR. RFC 1519 at http://www.rfc-editor.org/rfc/rfc1519.txt
Transmission Control Protocol RFC 793 at http://www.rfc-editor.org/rfc/rfc793.txt
The nmap at it web site http://www.nmap.org/
The Internet Protocol RFC 791 at http://www.rfc-editor.org/rfc/rfc791.txt
The Internet Control Message Protocol at http://www.rfc-editor.org/rfc/rfc792.txt
The nmap utility at http://www.nmap.org/
Simple Network Markup Language SNML info at http://www.cert.org/kb/snortxml/
Barnyard at http://sourceforge.net/projects/barnyard/
ACID_XML at http://www.maximumunix.org/
XML at http://www.xml.org/
Snort at http://www.sec33.com/sniph/

Chapter 5 Using Snort with MySQL

Snort database schema at http://www.incident.org/snortdb/
MySQL at http://www.mysql.org/
Stunnel is available from http://www.stunnel.org/
ODBC FAQ at http://www.ensyncsolutions.com/odbc_faq.htm
ODBC project at http://www.odbc.org/

Chapter 6 Using ACID and SnortSnarf with Snort

ACID is available from http://www.cert.org/kb/acid/
Apache web site at http://www.apache.org/
PHP web site at http://www.php.net/
GD library at http://www.boutell.com/gd/
PHPLOT package at http://www.phplot.com/
ADODB package at http://php.weblogs.com/adodb/
SnortSnarf at http://www.silicondefense.com/software/snortsnarf/index.htm
ADODB FAQ at http://php.weblogs.com/adodb_faq/

Chapter 7 Miscellaneous Tools

SnortSam at http://www.snortsam.net/
Activeworx web site at http://activeworx.com/idspm/
Rusty¹s Unreliable Guides at http://www.netfilter.org/unreliable-guides/
Easy IDS at http://www.argusnetsec.com/

Further Reading

Read Prentice Hall PTR to stay on the cutting edge of computer science and engineering.

Related Series

Related Imprints

Supplements

© Pearson Education, Inc., publishing as Prentice Hall PTR. Legal Notice. Privacy Policy. Feedback. Accessibility Features.