Hi, I have installed snort with Base & mysql. now I have 2 questions:
1- where we should install snort on a subnet? on a Gateway? suppose I have a subnet and I want to install snort as my IDS to controll all the trafics go out and come in to the subnet. after a main router?

2- I have problem with graphic in Base. if I must to use jpgraph (In Linux)? or another package?
Now I have installed Image_Graph. but there is a problem: "Failed opening required 'Image/Canvas.php' ", but there is not any Canvas.php file on my system.

Thanks in advance.

where we should install snort on a subnet? on a Gateway? suppose I have a subnet and I want to install snort as my IDS to controll all the trafics go out and come in to the subnet. after a main router?
Anything "central" will do if you want to sniff and that's all you have to work with.
If you want to actively control traffic have a look at Snort-inline.


I have problem with graphic in Base.
Sorry. Can't help you with that.