Chapter 12. Additional Tools for Snort IDS Management

Apart from ACID and SnortCenter, there are a number of applications to help you administer, monitor, and manage your Snort sensors. Some of the solutions are open source; others are commercial. We'll examine the open source tools more closely, but all of the commercial solutions we look at actually grew out of open source beginnings.

The main difference between the open source and the commercial tools is the ease of installation and what I'll call the "fit and finish." Open source tools are more difficult to install and their interfaces are not as polished. While we are not going into nearly as much detail as we did with ACID and SnortCenter, the main features of each application are highlighted. Investigate the tools to determine if they fit your particular needs.