installing snort
"Omar F. Altom" <[email protected]> Wed, 21 Sep 2005 12:30:59 +0300
| Newsgroups | gmane.comp.security.ids.snort.announce,gmane.comp.security.ids.snort.sigs,gmane.comp.security.ids.snort.devel,gmane.comp.security.ids.snort.cvs |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. ------_=_NextPart_001_01C5BE8F.2D09F91A Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Good day gents, =20 I m a security engineer working in an insurance company. I tried to install snort as follows: 1. Network based IDS for 3sensors for 3deferent subnets running on Fedora core 3. 2. Host based IDS for 5sensors for 5deferent servers running on Red Hat 3. 3. One console to remotely configure and manage the sensors windows or Linux platform. 4. A good reporting module to impress my managers. =20 I tried a lot of books but they don't guide me well. Please if any one has a straight forward installation guide for the exact requirements. Any help provided would be highly appreciated. =20 Regards, Eng. Omar Altom Computer Security Engineer Genereal Organization of Social Insurance Information Security Department Email: [email protected] Tel: 0096614777735 ex 2033 True enterprise security comes through diligence, not from a box =20 ------_=_NextPart_001_01C5BE8F.2D09F91A Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <meta name=3DProgId content=3DWord.Document> <meta name=3DGenerator content=3D"Microsoft Word 10"> <meta name=3DOriginator content=3D"Microsoft Word 10"> <link rel=3DFile-List href=3D"cid:[email protected]"> <o:SmartTagType = namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags" name=3D"country-region"/> <o:SmartTagType = namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags" name=3D"place"/> <!--[if gte mso 9]><xml> <o:OfficeDocumentSettings> <o:DoNotRelyOnCSS/> </o:OfficeDocumentSettings> </xml><![endif]--><!--[if gte mso 9]><xml> <w:WordDocument> <w:SpellingState>Clean</w:SpellingState> <w:GrammarState>Clean</w:GrammarState> <w:DocumentKind>DocumentEmail</w:DocumentKind> <w:EnvelopeVis/> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:ApplyBreakingRules/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--><!--[if !mso]> <style> st1\:*{behavior:url(#default#ieooui) } </style> <![endif]--> <style> <!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0cm; margin-bottom:.0001pt; text-align:right; mso-pagination:widow-orphan; direction:rtl; unicode-bidi:embed; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline; text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline; text-underline:single;} p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig {margin:0cm; margin-bottom:.0001pt; text-align:right; mso-pagination:widow-orphan; direction:rtl; unicode-bidi:embed; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} span.EmailStyle17 {mso-style-type:personal-compose; mso-style-noshow:yes; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; font-family:Arial; mso-ascii-font-family:Arial; mso-hansi-font-family:Arial; mso-bidi-font-family:Arial; color:windowtext;} span.SpellE {mso-style-name:""; mso-spl-e:yes;} span.GramE {mso-style-name:""; mso-gram-e:yes;} @page Section1 {size:595.3pt 841.9pt; margin:72.0pt 90.0pt 72.0pt 90.0pt; mso-header-margin:35.4pt; mso-footer-margin:35.4pt; mso-paper-source:0; mso-gutter-direction:rtl;} div.Section1 {page:Section1;} /* List Definitions */ @list l0 {mso-list-id:1514610599; mso-list-type:hybrid; mso-list-template-ids:129539968 67698703 67698713 67698715 67698703 = 67698713 67698715 67698703 67698713 67698715;} @list l0:level1 {mso-level-tab-stop:36.0pt; mso-level-number-position:left; text-indent:-18.0pt;} ol {margin-bottom:0cm;} ul {margin-bottom:0cm;} --> </style> <!--[if gte mso 10]> <style> /* Style Definitions */=20 table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman";} </style> <![endif]--> </head> <body lang=3DEN-US link=3Dblue vlink=3Dpurple = style=3D'tab-interval:36.0pt'> <div class=3DSection1 dir=3DRTL> <p class=3DMsoNormal dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'>Good day gents,<o:p></o:p></span></font></p> <p class=3DMsoNormal dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></fo= nt></p> <p class=3DMsoNormal dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><span class=3DGramE><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>I m a security engineer working in an insurance = company.</span></font></span><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'> I tried to install snort as follows:<o:p></o:p></span></font></p> <ol style=3D'mso-margin-top-alt:0cm' start=3D1 type=3D1> <li class=3DMsoNormal dir=3DLTR = style=3D'margin-right:0cm;margin-left:36.0pt; text-align:left;mso-list:l0 level1 lfo1;tab-stops:list = 36.0pt;direction: ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial'>Network based IDS for 3sensors for = 3deferent subnets running on Fedora core 3.<o:p></o:p></span></font></li> <li class=3DMsoNormal dir=3DLTR = style=3D'margin-right:0cm;margin-left:36.0pt; text-align:left;mso-list:l0 level1 lfo1;tab-stops:list = 36.0pt;direction: ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial'>Host based IDS for 5sensors for 5deferent servers running on Red Hat 3.<o:p></o:p></span></font></li> <li class=3DMsoNormal dir=3DLTR = style=3D'margin-right:0cm;margin-left:36.0pt; text-align:left;mso-list:l0 level1 lfo1;tab-stops:list = 36.0pt;direction: ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial'>One console to remotely configure and = manage the sensors windows or Linux platform.<o:p></o:p></span></font></li> <li class=3DMsoNormal dir=3DLTR = style=3D'margin-right:0cm;margin-left:36.0pt; text-align:left;mso-list:l0 level1 lfo1;tab-stops:list = 36.0pt;direction: ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial'>A good reporting module to impress my = managers.<o:p></o:p></span></font></li> </ol> <p class=3DMsoNormal dir=3DLTR = style=3D'margin-left:18.0pt;text-align:left; direction:ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></fo= nt></p> <p class=3DMsoNormal dir=3DLTR = style=3D'margin-left:18.0pt;text-align:left; direction:ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'>I tried a lot of books but = they don’t guide me well. Please if any one has a straight forward installation = guide for the exact requirements.<o:p></o:p></span></font></p> <p class=3DMsoNormal dir=3DLTR = style=3D'margin-left:18.0pt;text-align:left; direction:ltr;unicode-bidi:embed'><font size=3D2 face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'>Any help provided would be = highly appreciated.<o:p></o:p></span></font></p> <p class=3DMsoNormal dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></fo= nt></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><i><font size=3D3 color=3Dnavy face=3DArial><span = style=3D'font-size:12.0pt; font-family:Arial;color:navy;font-weight:bold;font-style:italic;mso-no-pr= oof: yes'>Regards,<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><st1:country-region><st1:place><b><i><font size=3D3 color=3Dnavy = face=3DArial><span = style=3D'font-size:12.0pt;font-family:Arial;color:navy;font-weight:bold; = font-style:italic;mso-no-proof:yes'>Eng.</span></font></i></b></st1:place= ></st1:country-region><b><i><font color=3Dnavy face=3DArial><span = style=3D'font-family:Arial;color:navy;font-weight: bold;font-style:italic;mso-no-proof:yes'> Omar = Altom<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><i><font size=3D3 color=3Dnavy face=3DArial><span = style=3D'font-size:12.0pt; font-family:Arial;color:navy;font-weight:bold;font-style:italic;mso-no-pr= oof: yes'>Computer Security Engineer<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><i><font size=3D3 color=3Dnavy face=3DArial><span = style=3D'font-size:12.0pt; font-family:Arial;color:navy;font-weight:bold;font-style:italic;mso-no-pr= oof: yes'>Genereal Organization of Social = Insurance<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><i><font size=3D3 color=3Dnavy face=3DArial><span = style=3D'font-size:12.0pt; font-family:Arial;color:navy;font-weight:bold;font-style:italic;mso-no-pr= oof: yes'>Information Security = Department<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><i><font size=3D3 color=3Dnavy face=3DArial><span = style=3D'font-size:12.0pt; font-family:Arial;color:navy;font-weight:bold;font-style:italic;mso-no-pr= oof: yes'>Email: [email protected]<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><i><font size=3D3 color=3Dnavy face=3DArial><span = style=3D'font-size:12.0pt; font-family:Arial;color:navy;font-weight:bold;font-style:italic;mso-no-pr= oof: yes'>Tel:<span style=3D'mso-spacerun:yes'> </span>0096614777735 ex 2033<o:p></o:p></span></font></i></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><font size=3D3 color=3Dred face=3D"Times New Roman"><span = style=3D'font-size: 12.0pt;color:red;font-weight:bold;mso-no-proof:yes'>True enterprise = security comes through diligence,<o:p></o:p></span></font></b></p> <p class=3DMsoAutoSig dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><b><font size=3D3 color=3Dred face=3D"Times New Roman"><span = style=3D'font-size: 12.0pt;color:red;font-weight:bold;mso-no-proof:yes'><span style=3D'mso-spacerun:yes'> &nbs= p;  = ; </span>not from a box<o:p></o:p></span></font></b></p> <p class=3DMsoNormal dir=3DLTR = style=3D'text-align:left;direction:ltr;unicode-bidi: embed'><font size=3D3 face=3D"Times New Roman"><span = style=3D'font-size:12.0pt'><o:p> </o:p></span></font></p> </div> </body> </html> ------_=_NextPart_001_01C5BE8F.2D09F91A-- ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php