hi,

ive been trying to configure snort that runs in centos 5.2 with shorewall.. i tried using installation guide in the snort website but im having problems in my configuration... is there any guide for installing and configuration of snort for centos 5?

or can you suggest a good IDS that will best fit with my current setup (shorewall + centos 5)

thanks..

hi,

what kind of problem - from your current config - that you were having to be exactly?
not_using_pcap_frames error? or any other kind of error?

There are tons of Snort install write-ups. Though most probably don't address installing on CentOS, CentOS is very similar to RH and Fedora. I recommend following documentation for RH/Fedora. That, or explain in detail your issues so that we know how to assist you.

Also, note that Snort and Shorewall are in no way naturally correlated, so I'm a bit lost on why you mention both. I'm thinking you've only an issue with Snort itself. The only time you may have an issue with both is if you're having Snort log to a remote database, which would require poking a hole in your firewall to allow the snort logs to the remote dbase.