[Snort-users] running snort under LIDS

Demetri Mouratis dmourati at ...3877...
Thu Dec 18 12:40:13 EST 2003


On Thu, 18 Dec 2003, Raber wrote:

> hi,
> anyone have some experience to share about running snort under LIDS patched
> kernel?
> i'v put my snort probe in the wild internet and want to have it somewhat
> protected

I have some experience with LIDS and experience with snort, but not snort
under LIDS.  My advise would be to have as little as possible on the LIDS
sensor box and to log remotely.  That will involve the least amount of
pain in setting up the LIDS acls (or whatever LIDS calls them).

Good luck.
---------------------------------------------------------------------
Demetri Mouratis
dmourati at ...3878...





More information about the Snort-users mailing list