Snort is completely great for finding out what your network is doing. If you want to obsess over every wierd packet passing through your bandwidth, snort’s your program.

And without any due modesty, I would refer you to my introduction to using it on www.sci-tech.co.uk(specifically http://www.sci-tech.co.uk/snortguide1.php)

This guide is the latest in a series on detecting malware, viruses and trojans. The articles are mainly aimed at people with limited specialist knowledge or experience but who have normally working brains. That basically means people about two hours behind me in their experience of network intrusion detection – that’s why it’s a newbies guide. I am certainly a pure amateur myself in this.

The snort guide tells you how to get it and how to use it – very briefly in both cases. If you have any questions or want to contribute your own views or experiences, please email us at sci-tech.