[Snort-users] Distro of choice

Nick Moore tsuyoi.usagi at ...11827...
Tue May 4 10:06:19 EDT 2010


JJ's right. Windows does not allow you to use shared object rules, which
prevents you from being fully covered.

On Tue, May 4, 2010 at 8:51 AM, JJ Cummings <cummingsj at ...11827...> wrote:

> The same argument could be made for the FreeBSD ports system... but I think
> that the best answer has already been given.. use what you know / are
> comfortable with.. well, as long as it's not Win 32 ;-)
>
> JJC
>
>
> On Tue, May 4, 2010 at 7:33 AM, Jason Wallace <jason.r.wallace at ...11827...>wrote:
>
>> Check out Gentoo Linux. The thing that makes Gentoo great is that it
>> is a source based disto. This means that the package management system
>> downloads the actual source tarball and complies it for your system,
>> as opposed to using precompiled binaries designed to run on any i686.
>> This lets you compile applications with only the options you want and
>> with optimizations specific for your CPU. IMO this results in much
>> better performance. This also reduces the over all size of your
>> system. Why use a binary from an RPM that is compiled with support for
>> a bunch of libraries your never going to use, but you need to install
>> to satisfy the dependancies for that precompiled binary?
>>
>> http://www.gentoo.org/main/en/about.xml
>>
>> thx,
>> Wally
>>
>> On Tue, May 4, 2010 at 8:35 AM, Alex Kirk <akirk at ...1935...> wrote:
>> > The reason this is an intelligent recommendation, BTW, is that Snort
>> really
>> > doesn't care which distro you use, at the end of the day. As long as
>> > libpcap, libpcre, etc. are installed and current, the rest of userland
>> is
>> > pretty much irrelevant to how Snort functions. You're way more likely to
>> see
>> > a difference based on the type of network hardware you're using.
>> >
>> > On Tue, May 4, 2010 at 7:34 AM, Nerijus Krukauskas <
>> nkrukauskas at ...11827...>
>> > wrote:
>> >>
>> >> On 2010-05-04, BrainStomp Snort <snort at ...14862...> wrote:
>> >> > What is the current distro of choice for deployment of snort?
>> >>
>> >> The long standing recommendation is to stick with distro you know best.
>> >>
>> >> --
>> >> http://nk99.org/
>> >>
>> >>
>> >>
>> ------------------------------------------------------------------------------
>> >> _______________________________________________
>> >> Snort-users mailing list
>> >> Snort-users at lists.sourceforge.net
>> >> Go to this URL to change user options or unsubscribe:
>> >> https://lists.sourceforge.net/lists/listinfo/snort-users
>> >> Snort-users list archive:
>> >> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>> >
>> >
>> >
>> > --
>> > Alex Kirk
>> > AEGIS Program Lead
>> > Sourcefire Vulnerability Research Team
>> > +1-410-423-1937
>> > alex.kirk at ...1935...
>> >
>> >
>> ------------------------------------------------------------------------------
>> >
>> > _______________________________________________
>> > Snort-users mailing list
>> > Snort-users at lists.sourceforge.net
>> > Go to this URL to change user options or unsubscribe:
>> > https://lists.sourceforge.net/lists/listinfo/snort-users
>> > Snort-users list archive:
>> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>> >
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100504/9eef657e/attachment.html>


More information about the Snort-users mailing list