一个入侵检测系统的详细分析过程，snort是一个十分出色的入侵检测系统。本书的调试平台是windows2000 sp4 ，snort2.2在vc6.0上编译和调试，即这是一个snort for windows，但只要理解了windows下的原理，那再snort for linux也就没有问题了。本书需要一些诸如socket编程，tcp协议的基础知识。
SHOW FULL COLUMNS FROM `jrk_downrecords` [ RunTime:0.001662s ]
SELECT `a`.`aid`,`a`.`title`,`a`.`create_time`,`m`.`username` FROM `jrk_downrecords` `a` INNER JOIN `jrk_member` `m` ON `a`.`uid`=`m`.`id` WHERE `a`.`status` = 1 GROUP BY `a`.`aid` ORDER BY `a`.`create_time` DESC LIMIT 10 [ RunTime:0.096553s ]
SHOW FULL COLUMNS FROM `jrk_tagrecords` [ RunTime:0.001342s ]
SELECT * FROM `jrk_tagrecords` WHERE `status` = 1 ORDER BY `num` DESC LIMIT 20 [ RunTime:0.002025s ]
SHOW FULL COLUMNS FROM `jrk_member` [ RunTime:0.001280s ]
SELECT `id`,`username`,`userhead`,`usertime` FROM `jrk_member` WHERE `status` = 1 ORDER BY `usertime` DESC LIMIT 10 [ RunTime:0.003570s ]
SHOW FULL COLUMNS FROM `jrk_searchrecords` [ RunTime:0.001050s ]
SELECT * FROM `jrk_searchrecords` WHERE `status` = 1 ORDER BY `num` DESC LIMIT 5 [ RunTime:0.003281s ]
SELECT aid,title,count(aid) as c FROM `jrk_downrecords` GROUP BY `aid` ORDER BY `c` DESC LIMIT 10 [ RunTime:0.014644s ]
SHOW FULL COLUMNS FROM `jrk_articles` [ RunTime:0.001426s ]
UPDATE `jrk_articles` SET `hits` = 1 WHERE `id` = 211452 [ RunTime:0.001410s ]
