ids

Building a snort sensor – part 2

Now with Snort installed we need to do configuration and get some rules. cd /usr/local/etc/snort/ Make sure to setup your HOME_NET and configure any additional paths for your rule sets. Go to snort.org and create an account, then get an oinkcode.  Now you can use the command like to...

Building a snort sensor – part 1

I have already covered Suricata in my previous posts, but sometimes you just need to have snort setup for various reasons. First go get freebsd http://www.freebsd.org/ , then use the FreeBSD handbook (if you need to) and create a basic installation.  I...

Suricata 1.0 release

The 1.0 release of the Suricata IPS/IDS has been released, you can get it here. http://www.openinfosecfoundation.org/index.php/download-suricata

3rd Suricata Beta

There is a 3rd Suricata Beta available, head on over to http://www.openinfosecfoundation.org/index.php/download-suricata . Be warned that there is still a few items that need to be fixed. Here is the list from the download section.

Known issues & missing...