IDS: building an IDS

[laurent van-cauwelaert <Laurent.Van-Cauwelaert@epita.fr>]

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

HI there,
i m a french student in computer science,
i have to make a project (with 4 friends),for the end of my first year 
in my engineer school,
and i ve choose to realise an IDS.
the challenge is that before being in that school (since september 1998),
i ve never even use a computer.
if anyone as any information about how to make something
efficient, he shouldn't hesitate to contact me.
i m specially looking for information on : everything

the most interesting stuff i found were here:
http://drawbridge.tamu.edu/


question of the day:
how do i detect sniffer?

first i ve wanted to send a packet to every possible adress on my
network and looking if the promiscious bit was set, but with 48 bits
MAC adress, i think i can suppose that it's quite ineficient and stupid,
but it works, so i m waiting for some better solution


laurent van cauwelaert (shredder for my friends)
van-ca_l@epita.fr