IDS and IPS with Snort 3
$31.99
Minimum price
$31.99
Suggested price

IDS and IPS with Snort 3

Get up and running with Snort 3 and discover effective solutions to your security issues

About the Book

Snort, an open source intrusion detection and prevention system (IDS/IPS), capable of real-time traffic analysis and packet logging, is regarded as the gold standard in IDS and IPS. The new version, Snort 3, is a major upgrade to the Snort IDS/IPS, featuring a new design and enhanced detection functionality, resulting in higher efficacy and improved performance, scalability, usability, and extensibility. Snort 3 is the latest version of Snort, with the current version at the time of writing being Snort v3.3.3.

This book will help you understand the fundamentals of packet inspection in Snort and familiarize you with the various components of Snort. The chapters take you through the installation and configuration of Snort, focusing on helping you fine-tune your installation to optimize Snort performance. You’ll get to grips with creating and modifying Snort rules, fine-tuning specific modules, deploying and configuring, as well as troubleshooting Snort. The examples in this book enable network administrators to understand the real-world application of Snort, while familiarizing them with the functionality and configuration aspects.

By the end of this book, you’ll be well-equipped to leverage Snort to improve the security posture of even the largest and most complex networks.

About the Author

Packt Publishing Ltd
Packt Publishing Ltd

Packt Publishing are an established global technical learning content provider, founded in Birmingham, UK with over twenty years’ experience in delivering premium rich content from ground-breaking authors on a wide range of emerging and popular technologies. Our titles have global relevance our multimedia portfolio includes over 9,000 books, e-books, audiobooks and video courses. www.packtpub.com

Table of Contents

  1. Introduction to Intrusion Detection and Prevention
  2. The History and Evolution of Snort
  3. Snort 3 – System Architecture and Functionality
  4. Installing Snort 3
  5. Configuring Snort 3
  6. Data Acquisition
  7. Packet Decoding
  8. Inspectors
  9. Stream Inspectors
  10. HTTP Inspector
  11. DCE/RPC Inspectors
  12. IP Reputation
  13. Rules
  14. Alert Subsystem
  15. OpenAppID
  16. Miscellaneous Topics on Snort 3

About the Publisher

This book is published on Leanpub by Packt Publishing Ltd

Packt Publishing are an established global technical learning content provider, founded in Birmingham, UK with over twenty years’ experience in delivering premium rich content from ground-breaking authors on a wide range of emerging and popular technologies. Our titles have global relevance our multimedia portfolio includes over 9,000 books, e-books, audiobooks and video courses. www.packtpub.com

The Leanpub 60 Day 100% Happiness Guarantee

Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.

You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!

So, there's no reason not to click the Add to Cart button, is there?

See full terms...

Earn $8 on a $10 Purchase, and $16 on a $20 Purchase

We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.

(Yes, some authors have already earned much more than that on Leanpub.)

In fact, authors have earnedover $14 millionwriting, publishing and selling on Leanpub.

Learn more about writing on Leanpub

Free Updates. DRM Free.

If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).

Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.

Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.

Learn more about Leanpub's ebook formats and where to read them

Write and Publish on Leanpub

You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!

Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.

Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.

Learn more about writing on Leanpub