Snort mailing list archives
Re: Reconfigure SNORT
From: Joel Esler <jesler () sourcefire com>
Date: Wed, 5 Jan 2011 23:36:57 -0500
Atkins, Dwane P said:
When SNORT was originally configured, it was done with just the sudo ./configure --prefix=usr/local/snort We want to configure with other options.
I recommend the options that are in the VRT's etc/snort.conf file in the VRT rulepack.
First, can we just configure, make and make install with these new options or does snort need to be removed and the redone?
Yes, you could do that, however, I recommend a "make uninstall" and a "make clean" in the Snort 2.9,0.3 tarball directory to make sure it's a nice clean setup.
Second, where do I find out what each option represents?
Type "./configure --help" in your Snort tarball directory. Descriptions are there.
I certainly appreciate everyone’s help. I am learning this daily and your help is a big reason why.
No problem. Thanks for supporting Snort! Joel ------------------------------------------------------------------------------ Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Reconfigure SNORT Atkins, Dwane P (Jan 05)
- Re: Reconfigure SNORT Joel Esler (Jan 05)