Snort mailing list archives

AW: (Snort-users) Upgrading Snort 1.7 to 1.8.x


From: <sandro.poppi () wacker com>
Date: Wed, 05 Sep 2001 07:19:00 +0200


I just did the same thing this week, RH 7.0, snort 1.7 -> 1.8.1. An RPM can be
found in the contrib section of RedHat's ftp-server
(ftp.redhat/com/pub/contrib/libc6/i386), but this is without databse support. I
created myself a new RPM out of the source RPM with mysql support.

The update runs completely well, where you must have a look on is of course the
manual (PDF version on snort.org) and snort.conf because various entries are new
and others are depricated.

If you want to use Max Vision's rules you too have to care about
/etc/snort/classification.config. Get vision18.conf.gz from www.whitehats.com
and cut and paste all config classification lines, else you get hundreds of
weird error messages beginning with Bad Priority setting...

If you are using a db like mysql, I didn't get advise how to reuse the old db
because the db schema changed too in 1.8.1. I created a new snort-db, ran
create_mysql against it and it worked with ACID.

HTH

So long,
Sandro


-----Ursprüngliche Nachricht-----
Von: "Sheahan Paul (PCLN-NW)" <Paul.Sheahan () priceline com> at
Internet
Gesendet: Dienstag, 4. September 2001 12:30
An: "Snort List (E-mail)" <snort-users () lists sourceforge net> at
Internet
Betreff: [Snort-users] Upgrading Snort 1.7 to 1.8.x



Is there documentation on how I can properly upgrade my Snort
1.7 server to
1.8.x? I am running on Red Hat Linux 7.0.

Also, is there a Snort 1.8.1 RPM released yet that anyone
knows of? I can
never seem to get Snort working properly unless I use the RPMs.......

Thanks



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: