[Snort-users] Snort setting

Ian Macdonald secsnort at ...5528...
Wed Jul 24 06:04:05 EDT 2002


The sensor name is what ever you would like use to identify your sensor. You
could just use your machine name.  You do not need to have the mysql client
installed. For the output module, get a copy of the latest rules from
snort.org (Not the -current set they are for 1.9) and then edit the
snort.conf with your favorite text editor. I would also read the
documentation on snort.org for more details

Ian
----- Original Message -----
From: "jo cam" <jo.cam at ...6346...>
To: <snort-users at lists.sourceforge.net>
Sent: Wednesday, July 17, 2002 12:16 PM
Subject: [Snort-users] Snort setting


> Hi,
>
> I want to use snort and MySQL in the following
> configuration:
> - the first snort sensor on linux station. The database
> MySQL also running on this sensor
> - the second sensor on Win 95
> - the third sensor on Win NT.
>
> QUESTIONS:
>
> 1. What is the sensor name ?
> 2. On Win95 and WinNT stations, is that necessary to have
> MySQL client installed ?
> 3. In each station how can i setup the output module part
> of snort.conf ?
>
> Regards,
>
> Jo
>
> _________________________________________________________
> Envoyez des messages musicaux sur le portable de vos amis
>  http://mobile.lycos.fr/mobile/local/sms_musicaux/
>
>





More information about the Snort-users mailing list