Re: install/configure Snort IPS mode on Windows OS

[Stephen Gantz <stephen.gantz () faculty umuc edu>]

Installing and running Snort on Windows is pretty simple, unless you want to add Barnyard2 or other companion tools 
that will require Cygwin to be deployed on Windows.  The other thing to keep in mind regarding your original question 
is that Snort cannot really be deployed to run as an inline IPS the way it can on Linux. You can certainly use it as an 
IDS however. 

Dr. Stephen D. Gantz
CISSP-ISSAP, CEH, CGEIT, CRISC, CIPP/G, C|CISO
Professor of Information Assurance
The Graduate School
University of Maryland University College
stephen.gantz () faculty umuc edu

> On Feb 13, 2015, at 11:48 AM, Joel Esler (jesler) <jesler () cisco com> wrote:
>
> Take a look here for a bunch of installation guides for Windows:
>
> http://www.winsnort.com/forum/7-tutorials-support-forums-for-installing-a-3264-bit-windows-intrusion-detection-system/
>
>
> That being said, we don’t officially recommend that you run Snort on Windows, while it is possible and lots of people 
> do.
>
> --
> Joel Esler
> Open Source Manager
> Threat Intelligence Team Lead
> Talos
>
> > On Feb 13, 2015, at 11:12 AM, walid abdalwahab <whwalid () yahoo com> wrote:
> >
> > Hi there
> >
> >
> >
> >
> > Please can anyone help me about how can install/configure Snort IPS mode on Windows OS.
> >
> > regards,
> > Waleed
> >
> >
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Dive into the World of Parallel Programming. The Go Parallel Website,
> > sponsored by Intel and developed in partnership with Slashdot Media, is your
> > hub for all things parallel software development, from weekly thought
> > leadership blogs to news, videos, case studies, tutorials and more. Take a
> > look and join the conversation now. http://goparallel.sourceforge.net/_______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest Snort news!
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming. The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!