Hi all,<br><br>I like the idea of specification based IDS, and since Vern has mentioned about it, I would like to gather the idea or suggestion of anyone who has done network baselining for their network, what are the tools and methodologies used by people around here to build the baseline of their network, and what kind of data are important for that matter(for example I myself prefer to use statistical and flow based tools to do that) however I really like to hear from the bro community.
<br><br>I know it should be different when applying on different networks but getting the idea is great.<br><br>Thanks.<br clear="all"><br>-- <br>Best Regards,<br><br>CS Lee<geekooL[at]gmail.com><br><br><a href="http://geek00l.blogspot.com">
http://geek00l.blogspot.com</a>