[Snort-users] Anyone on razorback?

Victor Roemer vroemer at ...1935...
Tue Oct 9 09:48:01 EDT 2012

Not to be pushy or annoying but your question regarding Razorback would
probably be better off on the razorback-users list, if nothing else for
archival purposes. (CCing)

That being said. Razorback packages its own Snort, this is done because the
Razorback api, being bleeding edge, was moving around faster than Snort.

But to answer your question, looks like you can download the latest RZB
flavor of Snort from


In that Snort tarball you'll find doc/README.rzb_saac which documents
configuring Snort to enable "Snort as a Collector (Nugget)"

Hope this helps

On Tue, Oct 9, 2012 at 7:22 AM, Pratik Narang <pratik.cse.bits at ...11827...>wrote:

> Hi all,
> Anyone out there employing razorback in a small to medium network
> environment? I wish to try it out with my Snort 2.9.3, but I guess
> razorback requires me to use whatever it provides it in *nuggets* (and
> what are they, btw??), which is v2.9.1 i guess.
> I notice on here on https://sourceforge.net/projects/razorbacktm/ that
> the project is quite young and on alpha since a long time. Plus the project
> homepage gives a confusing entry for Snort (see attached image).
> Thanks.
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20121009/8b6f0580/attachment.html>

More information about the Snort-users mailing list