Need Advice On Free/Opensource NIDS
So I need to deploy a network IDS in my intranet. The goals are:
- detect and alert for network attacks such as port scanning, exploit, payloads etc.
- Should be able to parse packets from a mirrored port of a switch/router. Deploying in host systems is not an option here.
- Ease of use and support is also a factor.
- Should be opensource or atleast free.
- Should be able to handle large amount of data.
Please share your suggestions.
Posted Mar 12, 2018, 8:54 PM UTC
79