Snort mailing list archives
RE: SNORT
From: Dr SuSE <drsuse () drsuse org>
Date: Tue, 14 Aug 2001 18:55:51 GMT
You'll probably have problems with the init script since it's just one borrowed from the suse distro. I think I saw a generic init script floating around on snort-users.
Try this install doc for more info. http://www.drsuse.org/snort/snort18.html <http://www.drsuse.org/snort/snort18.html> <http://www.drsuse.org> -----Original Message----- From: Mel Chandler PMI [mailto:MChandler () pmi delta org] Sent: Tuesday, August 14, 2001 12:27 PM To: snort-users () lists sourceforge net Subject: [Snort-users] SNORT I'm new to Linux and SNORT and was wondering if I could get some tips and/or help. I have installed SNORT v1.8 rpm on Red Hat 7.1, when it complained about missing a file, which I believe was the rules file, I just supplied it with a blank file. I'm not sure if there are some sort of rules I need to download or if it updates them itself. I've been seeing a lot of activity (80-90% ARP Broadcasts), but so far SNORT reports no activity. Is there a way to test it and ensure it is working ok. Also, is there some where I show get updated rules from? I kept clicking on links on the website for rules, but came to the download page and couldn't find anything. Any help would be great. Mel L. Chandler, A+, Network+, MCNE, MCDBA, MCSE+I, CCNA MChandler () PMI Delta org Network Analyst Information Services PMI Delta Dental (562) 467-6627 ========================= = not many animals were harmed in = = ..... the making of this email ........ = =========================
Score my PGP key @ http://www.drsuse.org/pks --------------------------------------------- Microsoft ist nicht installiert. http://www.drsuse.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users