Re: IDS for Unix

[Baron Biza <baron.biza () gmail com>]

hi, the problem is not read...the problem is the language, Im from
Argentina, and I cant find tutorial of Snort in spanish... well I
understand english but to read a long manual is so difficult, ill
try,thnx for ur replies, good luck.

On 6/30/05, Callan Tham <callan.tham () securecirt com> wrote:
> On Thu, 2005-06-30 at 01:10 +0300, Baron Biza wrote:
> > Hello, Im new in this list, I never used IDS, I want start with one
> > for Unix (FreeBSD and Linux also), I know about Snort but there are a
> > lot of rules to configure by hand,, the WIndows users of Snort have a
> > program in graphic mode to configure their Snort, but we not :-(, is
> > there any IDS good,with the same level,in graphic mode,or easiest to
> > learn?,thnx,good luck.
>
> Hi Baron,
>
> Actually, there isn't much to configure rules-wise for Snort. The rules
> are there, you just tell Snort if you want to use it in its config file.
> If you want graphical management, take a look at SnortCenter[1]. It can
> manage both rules and config files centrally, and is easy to setup and
> use.
>
> But hey, nothing beats vim and a good read of the Snort manual if you're
> on a *nix platform. Even with SnortCenter, the Snort User Manual is a
> must read if you want to know more about writing rules.
>
> Good luck, and have fun!
>
> Cheers,
>
> Callan
>
> [1] http://users.pandora.be/larc/

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------