Re: Anyone on razorback?

[Victor Roemer <vroemer () sourcefire com>]

Not to be pushy or annoying but your question regarding Razorback would
probably be better off on the razorback-users list, if nothing else for
archival purposes. (CCing)

That being said. Razorback packages its own Snort, this is done because the
Razorback api, being bleeding edge, was moving around faster than Snort.

But to answer your question, looks like you can download the latest RZB
flavor of Snort from

http://sourceforge.net/projects/razorbacktm/files/Nuggets/

In that Snort tarball you'll find doc/README.rzb_saac which documents
configuring Snort to enable "Snort as a Collector (Nugget)"

Hope this helps

On Tue, Oct 9, 2012 at 7:22 AM, Pratik Narang <pratik.cse.bits () gmail com>wrote:

> Hi all,
>
> Anyone out there employing razorback in a small to medium network
> environment? I wish to try it out with my Snort 2.9.3, but I guess
> razorback requires me to use whatever it provides it in *nuggets* (and
> what are they, btw??), which is v2.9.1 i guess.
> I notice on here on https://sourceforge.net/projects/razorbacktm/ that
> the project is quite young and on alpha since a long time. Plus the project
> homepage gives a confusing entry for Snort (see attached image).
>
> Thanks.
>
>
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!