Which tool is an open-source network intrusion detection system capable of real-time traffic analysis and packet logging on IP networks?

Which tool is an open-source network intrusion detection system capable of real-time traffic analysis and packet logging on IP networks?

• A. Snort
• B. Suricata
• C. AlienVault OSSIM
• D. Wifi Intruder Detect

Answer: (A)

Open-source network intrusion detectors that monitor live traffic and log packets on IP networks are designed to see what's happening on the fly and record details for analysis. Snort is the classic example that fits this description exactly, as it was built as an open-source IDS capable of real-time traffic analysis and packet logging on IP networks. It detects suspicious activity by applying user-defined rules to the traffic it observes, and it can alert administrators or operate inline to block traffic when configured. Suricata is also a strong open-source IDS with similar capabilities, so it’s a reasonable alternative, but the phrasing in this item matches Snort’s widely cited description most closely. AlienVault OSSIM is a SIEM that integrates tools like Snort rather than being the IDS itself, and Wifi Intruder Detect isn’t a recognized standard tool in this space.

Open-source network intrusion detectors that monitor live traffic and log packets on IP networks are designed to see what's happening on the fly and record details for analysis. Snort is the classic example that fits this description exactly, as it was built as an open-source IDS capable of real-time traffic analysis and packet logging on IP networks. It detects suspicious activity by applying user-defined rules to the traffic it observes, and it can alert administrators or operate inline to block traffic when configured.

Suricata is also a strong open-source IDS with similar capabilities, so it’s a reasonable alternative, but the phrasing in this item matches Snort’s widely cited description most closely. AlienVault OSSIM is a SIEM that integrates tools like Snort rather than being the IDS itself, and Wifi Intruder Detect isn’t a recognized standard tool in this space.