[Autogenerated] There are many different ways to expand snores capabilities.
Both Cisco and 3rd Party vendors offer additional tools to
integrate with snore and use its information.
It's not just additional tools that we're thinking of here though.
We'll need to talk about plugins and other integrations as well.
To start, Snore is fully integrated into Cisco's secure firewall solution.
We'll talk about this more in a later module.
Cisco also has various tools that can add to the
capabilities pulled pork for example,
helps automate rule management and downloads the pig doctor.
Yes, that's what it's called.
Is a tool to parsers and generate information from
snorts performance metric output.
Damon logger is essentially a packet sniffer and a
tap from the third party side.
Security onion comes to mind as a very popular tool that has snort built
right into it squeal is a tool that provides a nice GUI to access the
real time events from the tools base is a tool that is used to query and
analyze the snore alerts coming in.
It's built with a web for an end to make it easy to use.
And speaking of front ends snore B is a front end for snore as well.
Yeah,
there's a lot of them besides those additional tools which you can
find more with a quick web search or by navigating to the snort
website you have the ability to use plugins plugins give you the easy
ability to expand the tool itself.
We'll explore some of these later on in the course,
but here's the short list of some external or internal plugins Snort
three has over 200 plugins by default and an example of one is the
output plugin this is how your data gets to you.
Besides that there are detection,
plugins which detect a specific thing in the traffic and pre processors which
help us defrag reassemble or do other complex functions to the packets better
the flexible response plugin is really cool as well,
allowing you to use response actions based on a rule.
We'll also talk about the open app IDE plugin later on in the course,
if you want additional information about all of the plugin capabilities
and other expand ability features with Snort look here,
the snort documentation library is extensive and can help
you get going quickly with a lot of this.
It has a lot of detailed information about setting up snort white papers
around how to do specific things with it like optimized pattern matches
and has really good pre processor details,
go check it out