RE: [Security400] Snort Rules

["Fritz Hayes" <fhayes@xxxxxxxxxxxxx>]

I use it on an old p75 linux box to monitor the ethernet lines.
Usually, the box has no IP address.  The NIC is set to promiscuous mode
and just reviews the data stream for known hacks and attacks.  So, with
the iSeries, the Intrusion Detection box would sit on the ethernet line
running to the ethernet port on the iSeries.  There's a given set of
rules supplied with the download, but I feel there should be some added
for the iSeries environment.


Best Regards

Fritz Hayes
Atwater Associates

<snip>
|
|I download SNORT towards the end of last year but have been
|buried and have not done much with it.
|
|It's on my PC, but how would you use it with the iSeries ?
<snip>
|
|> Is anyone using Snort as an IDS with their iSeries?  What rule sets
|> have you found useful?
<snip>