PDA

View Full Version : Snort IDS on N900


mail_e36
2010-08-13, 14:54
Has anyone thought of trying to run the Snort Intrusion Detection System on the N900 (perhaps inside of Easy Debian)? (Info on Snort http://en.wikipedia.org/wiki/Snort_%28software%29)

The use cases go beyond "proof of concept", especially since you can put the WLAN device in promiscuous mode. It would be interesting to watch all the potentially malicious traffic on your wireless LAN directly from your N900.

Any ideas are welcome.

hardkorek
2010-08-13, 20:33
I'm not sure if snort works on wireless.
Anyway it is resource hungry program so it will kill your battery quickly.
I thing OSsec would be nice but for different purpose like monitoring and defending your phone (via active response, should be possible since titans kernel have iptables)