Snort NIDS (2 of 3)

• Snort may be operated in one of three modes:

• Packet sniffer -- reads packets and displays on console

• Packet logger -- logs packets to disk

• Network Intrusion Detection Mode -- analyze network traffic, log, alert