SNORT-GUI
nSpector
| SNORT-GUI | nSpector | |
|---|---|---|
| 1 | 1 | |
| 17 | 7 | |
| - | - | |
| 7.7 | 1.8 | |
| 8 months ago | over 2 years ago | |
| Python | Python | |
| MIT License | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
SNORT-GUI
-
What (inexpensive) IDS would you recommend?
If you're looking for an inexpensive ids, snort maybe the way to venture. They regularly update their community rules to zero-day vulnerabilities, but a knowledge of configuring and running snort is required. Would recommend checking out: https://github.com/WhiteHatCyberus/SNORT-GUI
nSpector
What are some alternatives?
Malcolm - Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
WebMap - Nmap Web Interface including XML parsing, maps and reports
pyp0f - p0f v3 with impersonation spoofing, written in Python - Accurately guess the OS of a packet with passive fingerprinting.
Scanz - A fast and powerful ARP based network scanner
dgad - DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic
nmapParsingPort - This tool parsing automatically the ports and hosts of the grepable file that can be obtained in nmap
nfstream - NFStream: a Flexible Network Data Analysis Framework.
scapy - Scapy: the Python-based interactive packet manipulation program & library.
StratosphereLinuxIPS - Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.