LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   How to Configure AIDE , Snort, ttywatch ? (https://www.linuxquestions.org/questions/linux-security-4/how-to-configure-aide-snort-ttywatch-565551/)

Peter_APIIT 06-30-2007 03:13 AM

How to Configure AIDE , Snort, ttywatch ?
 
Hello all Linux administrator, i have installed the above packages through yum but i don't know how to configure it.

Could u please show me some guide to do this ?

Thanks for your help.

Your help is greatly appreciated by me and others.

b0uncer 07-01-2007 05:16 AM

Usually programs like those have a configuration file on the system, usually clear-text, so you can edit it with a text editor of your choice, just remember the file syntax. Most configuration files should be somewhere under /etc (system-wide configurations), or under your home directory in a directory that starts with a dot like /home/username/.gnome2/ (per-user configuration).

Some config files even have their own manpage that describes what and how you can configure the program. That manpage may be named after the program itself, or in some cases the configfile. Try
Code:

man -k snort
for example, and if you find something interesting, like for example "/etc/snort.conf" (that was off the top of my head, probably not real), you then use
Code:

man /etc/snort.conf
to see that man-page. If nothing else, you use
Code:

man snort
If the program runs as a service (i.e. is always running or automatically started) you'll often have to restart the service or force it to re-read it's configuration after you've changed it.

Peter_APIIT 07-06-2007 02:39 AM

I have confgred the snort but when u type the terminal return no local rules found.

i typed snort -A full c /etc/snort/snort.config


Thanks for your help.

Peter_APIIT 07-06-2007 09:35 PM

Anyone can help me please.


All times are GMT -5. The time now is 08:10 AM.