Re: Snort 1.9 on Win 2000 Server

["Salvatore Basso" <sasab () pixteam com>]

Hello, they are content that also you have had my same problem : -)
I have followed your council and creed that functions, but my opinion is
that the procedure is not clean, the previous version was sure better,
however initially I had a problem with:

stream4_reassemble

I have eliminated the line and now works, but I have one 'warning' with:

..//backdoor.rules(9) Unknown ClassType: misc-activity

because ?

however after all now works, but I would want to have some greater
information regarding:

"classification configuration rows"

thanks.

                 - Salvatore



----- Original Message -----
From: "bunger" <bunger () mail BillUnger com>
To: "Salvatore Basso" <sasab () pixteam com>
Sent: Friday, October 18, 2002 2:00 AM
Subject: Re: [Snort-users] Snort 1.9 on Win 2000 Server


> I had a bunch of problems with the same thing.  Though I don't remember
exactly what I did to fix it, here are some tips:
> GENERAL TAB - Main Config:
> 1.  make sure you have your log files and directories set
>
> IDS RULES TAB - Snort Config:
> 1.  make sure you load the snort.conf file
>
> IDS RULES TAB - Rules / Signatures:
> 1.  make sure you set the Classification configuration file ( button on
right of the screen
> I think I basically started without setting any of the extra options in
IDSCenter and just worked on the above.  Then once I could generate the
script, I went back through and made more advanced changes...
> hope that helps,
> Bill
>
> ---------- Original Message ----------------------------------
> From: "Salvatore Basso" <sasab () pixteam com>
> Date: Mon, 14 Oct 2002 15:38:17 +0200
>
> > Hello, thanks for your help, I have installed 'ids center' but I have a
> > problem that I did not have in the previous version of ids center, in
fact
> > in the version that I have installed I do not succeed to find the key
> > necessary in order to generate a 'script', I have seen all the menu but
> > without happening!! you could help me? I know that it is a banal question
> > and in fact in the previous version I did not have this problem in how
much
> > the key necessary in order to generate a script was much obvious.
> > anchor thanks.
> >
> >                 - Salvatore
> >
> > ----- Original Message -----
> > From: "bunger" <bunger () mail BillUnger com>
> > To: "Salvatore Basso" <sasab () pixteam com>
> > Sent: Thursday, October 10, 2002 5:51 PM
> > Subject: Re: [Snort-users] Snort 1.9 on Win 2000 Server
> >
> >
> > > Download and install the iDSCenter from
> > http://www.packx.net/packx/html/en/idscenter/index-idscenter.htm
> > > ---------- Original Message ----------------------------------
> > > From: "Salvatore Basso" <sasab () pixteam com>
> > > Date: Wed, 9 Oct 2002 12:21:08 +0200
> > >
> > > > Hello, I have installed the Snort 1.9 on Windows 2000, before
installing
> > > > Snort I have installed WinPCap (last version), finished the
installation
> > of
> > > > Snort to the inside of Start --> Programs does not come created some
> > > > reference to Snort ! the directory instead comes created but to its
> > inside
> > > > there is alone snort.exe and not there is idscenter.exe, I have tried
to
> > > > reinstall but the result is not changed. How I can resolve? thanks.
> > > >
> > > >                 - Salvatore
> > > >
> > > >
> > > >
> > > >
> > > > -------------------------------------------------------
> > > > This sf.net email is sponsored by:ThinkGeek
> > > > Welcome to geek heaven.
> > > > http://thinkgeek.com/sf
> > > > _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users () lists sourceforge net
> > > > Go to this URL to change user options or unsubscribe:
> > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > Snort-users list archive:
> > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by: viaVerio will pay you up to
> > $1,000 for every account that you consolidate with us.
> > http://ad.doubleclick.net/clk;4749864;7604308;v?
> > http://www.viaverio.com/consolidator/osdn.cfm
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users