Snort -IPS

priyadarshan · 03-16-2009, 04:14 AM

I may sound funny.........I am new to snort......... I went through snort configuration tutorials and articles..... But they have not specified which file should I edit?......./etc/snort.conf???

And How???

And are there any other sites which provide snort configuration tutorials lucidly????

Pls specify.....

wsduvall · 03-16-2009, 08:50 AM

It really depends on what you would like to do with it. Snort has several modes of operations, and it needs to be configured based on your needs. The snort config file is usually at /etc/snort/snort.conf. If your looking for IPS, you should google "snort inline".