My Company wants to impliment SNORT for NIDS. Earlier it had gone for Fedora Core 4, but it seems they had some problem and they say Fedora used to crash with SNORT. Without SNORT, Fedora was running good. What is the best distro to go for.. wherein i can get stability..My company wants to impliment it on a RedHat system (RedHat 8/9, Fedora 1/2/3/4)
Though i've been working on Linux and specifically towards System Administraion, I am still to gain knowledge on SNORT and NIDS. So any pointers towards starting that would be great!!
If the above mentioned problem is specific to Fedora 4, are there any patches available?

maybe try debian, which has an official snort package...

debian's packages all go through some very thorough QA processes, so you can rest assured the package will work well with the distro... also, stability is one of debian's priorities - unlike fedora...

http://packages.debian.org/stable/net/snort

I'm not aware of the fact snort has been proven more reliable with any certain distrobution. Debian would be a good choice, as would RedHat. Slackware seems to work with little to no troubles with snort, and there are even packages in .tgz format available on http://www.linuxpackages.net for it. A good administrator should be able to get it to work flawlessly with whatever he is working with.

anybody's tried CentOS + SNORT ? Any bugs or problems of any kind that you faced? I feel CentOS would be better choice than fedora as it is an RHEL clone and hence more stable.
Of'course Debian is a good choice.. no doubt abt that. But my company wants to do it on RedHat based system. moreover i have worked on RedHat for a very long time and hence know most of the ins and outs. getting debian and getting familiar with it is going to take some time atleast i guess. We have a testing system at our place where we can try Debian+SNORT at a later date.

i've never used CentOS, but as has been said, you should be able to get snort to work on *any* decent distro, really (even fedora core 4)...

http://www.snort.org/docs/setup_guid...t_base_SSL.pdf

the snort faq might help you also: http://www.snort.org/docs/faq/1Q05/

I've played with Snort on Debian (Woody) and it worked fine.

try this with snort installed, + + +

DajomU