Snort - the de facto standard for intrusion detection/prevention
Snort - the de facto standard for intrusion detection/prevention: "Construction and Use of a Passive Ethernet Tap

by Michael Peters

This Tech Tip provides straightforward instructions on how to construct and use a passive Ethernet tap. The end product may be used with any hub or switch and any operating system. A passive Ethernet tap is useful when installing an intrusion detection system (IDS) sensor or when snooping Ethernet traffic."
- posted by Gp @ 1:04 PM