I have never used snort before and I just installed it on my slackware box. I am having trouble finding the install directory. I read somewhere that it would be in /etc/snort for configuration items but this directory does not exist! I ran the comany snort -dev and snort started running showing info so I know snort is working....

Questions:
1: where are the key directorys in slackware 10.1 for snort configuration and logging??
2: Places to get some good rulesets for snort since i heard the default flags to many errors??
3.: Any other info you can give me that you think may help is appreaciated???

Anyone????

I've never used Snort.
1) Did you try /usr/local/etc ? Try using slocate or find to locate them.
2 and 3) don't know

slocate seemst to only find the files in the directory that I unzipped and installed it from?

and find snort just says "no such file or directory"

Acording to a doc i found, you should have a sample configuration file at /usr/local/etc called snort.conf-sample (this can vary if you used the --prefix argument when compiling).

Edit: This config sample file should also come with the sources of snort, so simply getting it from there and copying to the directory where snort tries to read it, should work.

Interesting, the only files found with both of those comands are the files from the install, Do I have to create the folders in etc and wherever else that run snort from scratch??? Does anyone know?


Thanks for the find commands!!!!!!!!!!

Ermm, did you installed snort? If you did, how?

The easy way:http://www.linuxpackages.net/search_...snort&ver=10.1

I installed snort from the package I got from snort.org and I used
./configure
make
make install

I recieved no errors and if I type snort -dev into the prompt snort will start scrolling network traffic so I know its installed

I downloaded snort source and I see a etc directory inside it with snort.conf file, you may want to check it. You could try creating a snort directory inside /etc with: mkdir /etc/snort and copying that config file there.

Sweeeet , thanks I didnt know you would have to use the instalation files for the directory your configs are in, all the tutorials indicate that the files would be in the /etc /snort directory of the root filesystem....

Thanks for you help!!!