Snort mailing list archives

Re: Reconfigure SNORT


From: Joel Esler <jesler () sourcefire com>
Date: Wed, 5 Jan 2011 23:36:57 -0500

Atkins, Dwane P said:
   When SNORT was originally configured, it was done with just the sudo
   ./configure --prefix=usr/local/snort

    

   We want to configure with other options. 


I recommend the options that are in the VRT's etc/snort.conf file in the
VRT rulepack.

    

   First, can we just configure, make and make install with these new options
   or does snort need to be removed and the redone?

Yes, you could do that, however, I recommend a "make uninstall" and a
"make clean" in the Snort 2.9,0.3 tarball directory to make sure it's a
nice clean setup.


    

   Second, where do I find out what each option represents?

Type "./configure --help" in your Snort tarball directory.  Descriptions
are there.


    

   I certainly appreciate everyone’s help.  I am learning this daily and your
   help is a big reason why.

No problem.  Thanks for supporting Snort!

Joel

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: