People are too busy to setup an IDS.

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Link.

The passive monitoring isn't a new idea. I think Ron Gula left Enterasys to work on something along these lines. Could be neat though. :D
 

mboy

Diamond Member
Jul 29, 2001
3,309
0
0
I saw Marty Roesch give a presentation on it at last year's SANS Fire in D.C. @ the time, the idea was strictly for the sourcefire product (whih looks REAL nice) and when asked about incorporating it into the Open source community (SNORT), he said NO. So, it is nice to see him implement his Real Time Awareness (as they call it) into something those of use that do not have the $40K to plop down on the sourcefire appliances are, able to enjoy :).
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
It should be neat. Snort can already be a pig though, I wonder how this will affect memory usage. ;)