RE: Help!!!

["David" <dwad24 () excite com>]

> Anyone could help me using Snort? What rules and config files have 
> to be changed to reflect a network? How do they interact?
> Any help would be greatly appreciated.
> Thanks
> Hank.

Hey Hank,

Read these.  They are all very well written docs on snort installation, rule writing configuration etc:

1. http://www.snort.org/docs/FAQ.txt
2. http://www.snort.org/docs/writing_rules/

These are platform specific install guides(below), so pick one that closely matches your os, or read them all :)  they 
will all help you acheive a good understanding of how snort works, what is needed for it to work etc.

3. http://www.snort.org/docs/snort_acid_rh9.pdf
4. http://www.snort.org/docs/FreeBSD47RELEASE-Snort-MySQLVer1-3.pdf
5. http://www.snort.org/docs/snort-rh7-mysql-ACID-1-5.pdf
6. http://www.snort.org/docs/snort-win2k.htm

Once you have read one or all of these, go back and read 1 and 2 again :P


All of these can be found here:
http://www.snort.org/docs/

Those should get you headed in the right direction...



HTH,

Dave
-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Join Excite! - http://www.excite.com
The most personalized portal on the Web!


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users