(4)
Your rating: Now say why...
HenWen is a network security package for Mac OS X that makes it easy to configure and run Snort, a free Network Intrusion Detection System (NIDS). HenWen's goal is to simplify setting up and maintaining software that will scan network traffic for undesirable traffic a firewall may not block. Everything you need to have is bundled in; there is no compiling or command line use necessary.
A NIDS has a number of practical uses on a network. For people that use Mac OS X Server or otherwise provide network services with their Macs, a NIDS will inform the administrator that someone from a
A NIDS has a number of practical uses on a network. For people that use Mac OS X Server or otherwise provide network services with their Macs, a NIDS will inform the administrator that someone from a
What's New
Version 2.1.2:
- Restored compatibility with Mac OS X 10.2.x.
- Fixed a problem which made it impossible to edit variables and rules under Mac OS X 10.4.x.
- The "Launch Snort as a startup item" menu item works again under Mac OS X 10.4.x.
Requirements
PPC, Mac OS X 10.2 or later.
PPC, Mac OS X 10.2 or later.
HenWen User Discussion (Write a Review)
Overall:
(5)
(5)
-
-
-
HenWen is a network security package for Mac OS X that makes it easy to configure and run Snort, a free Network Intrusion Detection System (NIDS). HenWen's goal is to simplify setting up and maintaining software that will scan network traffic for undesirable traffic a firewall may not block. Everything you need to have is bundled in; there is no compiling or command line use necessary.
A NIDS has a number of practical uses on a network. For people that use Mac OS X Server or otherwise provide network services with their Macs, a NIDS will inform the administrator that someone from a specific place on the network is trying to scan the server for possible vulnerabilities, or try to compromise security. A NIDS can also scan the network for bad TCP or ICMP traffic, or traffic that suggests someone on the network (or the local computer) is trying to do something that the network administrator does not want them doing (ie. trading pirated software or using software they're not supposed to be using). While a NIDS is mainly used by network administrators, a NIDS is also a useful thing for home users to have as well, especially for home users who are always connected to the Internet and/or have a home network installed.
A NIDS has a number of practical uses on a network. For people that use Mac OS X Server or otherwise provide network services with their Macs, a NIDS will inform the administrator that someone from a specific place on the network is trying to scan the server for possible vulnerabilities, or try to compromise security. A NIDS can also scan the network for bad TCP or ICMP traffic, or traffic that suggests someone on the network (or the local computer) is trying to do something that the network administrator does not want them doing (ie. trading pirated software or using software they're not supposed to be using). While a NIDS is mainly used by network administrators, a NIDS is also a useful thing for home users to have as well, especially for home users who are always connected to the Internet and/or have a home network installed.
Copyright © 2012 MacUpdate LLC
- -
+1
Name reviewed on 13 May 2006
I can only strongly encourage to use this system, I my self am a developer, and traditional Macintosh user since Mac OS 7.
This tremendous work beats all commercial products with it's community and software development as well as support. It should win the Apple Design Award.
-4
Anonymous reviewed on 25 Apr 2005
If I wanted all this garbage taking up valuable recources I would switch back to my full of security holes M$ XP machine which had AV ASW ATW ACB HOST FW DFW Cleaner DASW running which a hem never fixed corrected or really protected me any of those issues. Get real!
+1
+2
You will probably never have any issues a la intrusion but Snort exists to give web admins peace of mind (as well as a tool to track those bad guys who DO try to screw with you).
+1
Anonymous reviewed on 30 Dec 2003
Anonymous reviewed on 07 Oct 2003
Anyway - I am on an Airport network with an IP like 10.0.1.20. Having setup Henwen(and letterstick) to run on en1 (would not accept en0,en1) - I tried to use nMapFE on that IP - but got no alerts! Can I not run the scan from the same computer?
Thanks!
Anonymous reviewed on 02 Oct 2003
1. quitting HenWen does _not_ stop Snort. you can start/stop it from within HenWen, though
2. the logs are placed in /var/logs/snort/
3. that's ok. if there haven't been alerts, there isn't an alert log :)
4. you can use a port scanner/sniffer like NmapFE on your own IP
5. en0 is your primary ethernet card (built-in ethernet). if you use airport to connect to the internet, you must configure HenWen to en1 (typically), for modem ppp0 .... etc.
Also: To have LetterStick alert you, you must configure snort output to 'Log alerts to a Unix socket'
RTFM! - You should really read the (excellent!) documentation :)
Anonymous reviewed on 30 Sep 2003
However:
1. When I quit HenWen, is NDIS and Snort still running?
2. Where are the logs placed? How can I see it from within HenWen?
3. With LetterStick installed, I still cannot see Snorts Alert Log (I have had no alerts) - it opens a terminal, asks for my password and then nothing. Is this OK?
4. How can I test HenWen ?
5. I get these messages in console - is this Ok or is there a problem?:
OpenPcap() device en0 network lookup: en0: no IPv4 address assigned
HenWen[1854] *** -[NSCFArray objectAtIndex:]: index (-1) beyond bounds (2)
Any information is appreciated.
+1
Anonymous reviewed on 26 Sep 2003
A full-fledged Intrusion Detection System which is easy to use and highly configurable.
And it is free for personal use!
The LetterStick application is a great addition, although the colorful icon is a bit disturbing in the menu bar. Still better than having it in the dock, though :)
Maybe a black&white option, soon?
Also, it would be nice if there was an installer for the log rotation feature.
Anonymous reviewed on 07 Aug 2003
oh. cool app too :)
Anonymous reviewed on 23 Apr 2003
Anonymous reviewed on 21 Jun 2002