Use your Snort to sniff traffic
September 21, 2021

Use your Snort to sniff traffic

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with Snort

Currently Snort's main use is IPS (Intrusion Detection System) which gives us the ability to give the company real-time traffic analysis along with data packet logging. This is mainly used in the main corporate environment to analysis traffic for any potential malicious activity.

Pros

  • IPS detection.
  • DoS detection.
  • Packet logging.

Cons

  • Configuration in Linux.
  • Packet sniffing.
  • Real-time traffic monitor.
  • Slow down in SQL transactions.
  • Improper routing.
Snort was chosen mainly for the ease and cost. With Snort we was able to set up in a matter of minutes without any professional services needed. If you are used to packet tracing the old fashion way, this is the product for you.

Do you think Snort delivers good value for the price?

Yes

Are you happy with Snort's feature set?

Yes

Did Snort live up to sales and marketing promises?

Yes

Did implementation of Snort go as expected?

Yes

Would you buy Snort again?

Yes

ExtraHop Performance Platform, Wireshark, Cisco Secure IPS (NGIPS)
We have used it for packet sniffing and debugging the traffic. Most valuable situation is when we have corporate issues when traffic isn't routing properly. It gives us the ability to determine how and where traffic is routing and determine if it's going the proper way.

Comments

More Reviews of Snort

  1. Home
  2. Intrusion Detection Systems
  3. Snort Reviews
  4. User Review of Snort