RE: [cobalt-users] article at LinuxSecurity.com

[Rodolfo Paiz <rpaiz@xxxxxxxxxxxxxx>]

> After reading the article at
> http://www.linuxsecurity.com/articles/intrusion_detection_arti
> cle-2655.html
> I think I might give Snort a try on another box...
>
> What do y'all think?

Snort may or may not be a good program; I don't know. Unfortunately the
writing you linked to is not an "article," it is a smear piece. The
author is trying to achieve two things: (1) total disqualification of
PortSentry and (2) high praise of Snort. This article should have been
named "All The Justification I Can Come Up With For Hating PortSentry
and Loving Snort."

I cannot with comfort put my faith in writing by someone whose
objectivity I cannot trust. I will soon take a look at snort and try to
see for myself whether it has a place in my network, and I assume that
it will. However, this article by itself is useless.

--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>