PostScript version of “Snort – Lightweight Intrusion Detection for Networks” by Martin Roesch! This paper discusses the architecture, performance, and uses of Snort. If makes a comparative analysis of Snort to some other wellknown programs used for similar purposes. There is also a nice rules tutorial contained in the document for those of you wanting to know how the rules system works.
You can download it from the following link: https://packetstormsecurity.com/files/download/11746/lisapaper.ps
Source: https://packetstormsecurity.com/files/11746/lisapaper.ps.html