Shortcomings
Although Snort is a great application for intrusion detection, it does have its shortcomings. The good news is that the Snort community is working very hard to address a number of important issues, and is already on target for a few of them.
Flexibility Breeds Complexity
Snort is designed to be as flexible, customizable, and extensible as possible. This requires that Snort not be a turnkey, out-of-the-box solution. You can't pop in a CD and have Windows Installer do all the work for you. It is necessary to learn Snort plus other supporting applications to make Snort function.
Snort is also quite difficult to install correctly. There are several components that must be working in unison for the IDS to run smoothly. Little start-to-finish ...
Get Intrusion Detection with Snort now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
