Snort mailing list archives
RE: Installing on RedHat
From: <patrick () internetsecurityguru com>
Date: Wed, 11 Jan 2006 12:38:25 -0600
I have an oinkmaster doc out there and if I can ever shake the flu and respiratory infection I have I will finish my barnyard documentation. Basically for how they work together is you tell snort how to log (flat file, unified file, or DB) (then you have a program like barnyard (if you use unified) spit it into the DB) or get the data into the DB directly from snort and read it with BASE or Sguil. Or run something like snortsnarf against the flat file. Hope that helps, and makes sense. The fever is burning and my brain is fried so no telling if this e-mail will even be anything close to readable. Time to go take more pills and chug some Nyquil to top it of. Happy snorting, and happy new years to all. Patrick S. Harper | CISSP RHCT MCSE www.internetsecurityguru.com Technology is not a panacea. Commonsense, knowledge, and diligence are the costs of a secure environment. -----Original Message----- From: Shane Presley [mailto:shane.presley () gmail com] Sent: Wednesday, January 11, 2006 12:10 PM To: patrick () internetsecurityguru com Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] Installing on RedHat Thanks, that worked perfectly for me. One documentation suggestion for the group (or maybe this exists?). Some kind of a high level overview of the components and choices. For example, how all the pieces can work together, and your options (Snort, back end db options, Base, OinkMaster, etc). But I appreciate all the excellent Setup Guides that are out there! Shane On 1/10/06, patrick () internetsecurityguru com <patrick () internetsecurityguru com> wrote:
Try using the CentOS/RHEL guide on the snort.org website. It will walk
you
through it step by step Patrick S. Harper | CISSP RHCT MCSE www.internetsecurityguru.com Technology is not a panacea. Commonsense, knowledge, and diligence are
the
costs of a secure environment.
------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Installing on RedHat Shane Presley (Jan 10)
- RE: Installing on RedHat patrick (Jan 10)
- Re: Installing on RedHat Shane Presley (Jan 11)
- RE: Installing on RedHat patrick (Jan 11)
- Re: Installing on RedHat Shane Presley (Jan 16)
- Thomas Zauner's snort and tools overview (was Re: [Snort-users] Installing on RedHat) Alex Butcher, ISC/ISYS (Jan 16)
- Re: Installing on RedHat Shane Presley (Jan 11)
- RE: Installing on RedHat patrick (Jan 10)