Average Ratings 1 Rating

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Snort stands as the leading Open Source Intrusion Prevention System (IPS) globally. This IPS utilizes a collection of rules designed to identify harmful network behavior, matching incoming packets against these criteria to issue alerts to users. Additionally, Snort can be configured to operate inline, effectively blocking these malicious packets. Its functionality is versatile, serving three main purposes: it can act as a packet sniffer similar to tcpdump, function as a packet logger that assists in troubleshooting network traffic, or serve as a comprehensive network intrusion prevention system. Available for download and suitable for both personal and commercial use, Snort requires configuration upon installation. After this setup, users gain access to two distinct sets of Snort rules: the "Community Ruleset" and the "Snort Subscriber Ruleset." The latter, created, tested, and validated by Cisco Talos, offers subscribers real-time updates of the ruleset as they become available to Cisco clients. In this way, users can stay ahead of emerging threats and ensure their network remains secure.

Description

WinDump serves as the Windows adaptation of tcpdump, a powerful command line network analysis tool originally designed for UNIX systems. It is entirely compatible with tcpdump, allowing users to monitor, troubleshoot, and save network traffic to disk based on a variety of intricate rules. This tool can be executed on various Windows operating systems including 95, 98, ME, NT, 2000, XP, 2003, and Vista. Utilizing the WinPcap library and drivers, which are available for free from the WinPcap website, WinDump captures network traffic effectively. WinDump also facilitates wireless capture and troubleshooting for 802.11b/g networks when paired with the Riverbed AirPcap adapter. It is distributed at no cost under a BSD-style license and has the ability to utilize the interfaces made available by WinPcap. Additionally, WinDump can operate across all operating systems that are compatible with WinPcap, marking its role as a direct port of tcpdump. Users can initiate multiple sessions either on the same network adapter or across different adapters; while doing so may increase CPU usage, there are no significant disadvantages to running multiple instances simultaneously. This flexibility makes WinDump a valuable tool for network administrators and engineers alike.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Elastic Observability Yes 
EndaceProbe Yes 
Joe Sandbox Yes 
NXLog Yes 
Palo Alto ATP Yes 
Panaseer Yes 
Picus Yes 
Project Ares Yes 
ThreatQ Yes 

Integrations

Elastic Observability No 
EndaceProbe No 
Joe Sandbox No 
NXLog No 
Palo Alto ATP No 
Panaseer No 
Picus No 
Project Ares No 
ThreatQ No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.snort.org

Vendor Details

Company Name

WinPcap

Website

www.winpcap.org/windump/

Product Features

Alternatives

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec
Snort Reviews

Snort

Snort Social