![]() |
|
XP is just a number | |
PerlMonks |
Re: Re: How do *you* secure your network with Perl?by Rhose (Priest) |
on Mar 27, 2002 at 14:58 UTC ( #154680=note: print w/replies, xml ) | Need Help?? |
While you *could* write an IDS in perl, I am pretty sure any link with much activity would cause the PerlIDS(tm) to drop packets.
However, a better use for perl in your IDS implementation is in the role of analysis scripts. Your IDS implementation should probably consist of one or more "quick and dirty" systems -- snort (or your IDS of choice) with fewer rules, and one or more analysis machines. Perl excels in the analysis role -- processing "historical" data.
In Section
Meditations
|
|