[sentinix-list] Snort Conf.

OK. How do I edit the conf file that is stored in the MySQL database?



On Wednesday 24 March 2004 18:24, RichardKebo-JdlnA/[email protected] wrote:
> Hello,
> I am trying to edit the snort.conf file. But I am not sure what file to
> edit.
> I edited /etc/snort/snort.conf but when I look at the snort 
configuration
> file from within the sensor console of snortcenter it does not show the
> change.
> If I look at the system status on the console, it reports the conf file
> being used is: /usr/local/snort/sensor/rules/snort.eth1.conf.
> After I edit this file and reload, the changes still do not show up.

SnortCenter uses a MySQL database, when you do a reload, SnortCenter takes 
the 
rule configuration it has stored in the MySQL database and writes the new 
snort.<if>.conf file. Either choose to use SnortCenter, if you want to 
edit 
snort.conf by hand, do not use SnortCenter at all.

>
> Also, what distro is Sentinix based on? And how do we do updates?

It's made from scratch, inspired by LFS and Slackware. Slackware packages 
*can 
not* be used with SENTINIX. The current version does not include package 
management, so you will have to download tarball sources, compile and 
install 
"manually".

                 Michel