Koozali.org: home of the SME Server

[UPDATE] Snort for sme server


Offline Marcoof

  • 18
  • +0/-0
Re: [UPDATE] Snort for sme server
« Reply #1 on: September 15, 2007, 11:13:33 AM »
Thanx a lot Mastersleepy !!!!
Working well exept guardian for me. I ust modify guardiand to get the external adress, create guardian.log.
guardian need /etc/snortalert.log and on your setup it's in /etc/snort/snortalert.log

Best regards,
MaRCoOf

Offline Knuddi

  • *
  • 540
  • +0/-0
    • http://www.scanmailx.com
Re: [UPDATE] Snort for sme server
« Reply #2 on: August 03, 2008, 08:01:26 PM »
Hi there, any plans to release a 2.8 based version?

Offline slords

  • ****
  • 235
  • +3/-0
Re: [UPDATE] Snort for sme server
« Reply #3 on: August 03, 2008, 09:01:10 PM »
If this is the same package we looked at importing into smecontribs be aware that the package contains pre-compiled binaries.  A better way would be to write an integration package and then you can just install/upgrade the snort package that many others maintain.  It also allows you to have other archs like x86_64.
"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs,
and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." -- Rich Cook