Re: Snort Debian newbie all is well but I have rules questions

["Richard Bejtlich" <taosecurity () gmail com>]

David wrote:

> Hello snort users, gurus, developers, evangelists, ranters and ravers. I am a Snort newbie.

Hi David,

I strongly second Joel's recommendation to run Snort from source.  You
don't need to be hassled by trying to figure out issues introduced by
Debian package maintainers while you're learning Snort.  2.3.2 is also
very old.

I'm writing a series of monthly articles on Snort called the Snort
Report.  If you look at the top of the list of articles here

http://www.taosecurity.com/research.html

you'll find links to all of the articles written thus far.  Start with
the first one to learn how to install Snort from source.  Replace
whatever version I used with 2.6.1.4.

Sincerely,

Richard
http://taosecurity.blogspot.com

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users