Table of Contents
Advertisement
Installing the
Snort Software
1
Refer to the 3COM Security Switch 6200 Product Release Notes for the correct software version and rpm file name.
Installing the Snort Software Onto Your
This chapter describes how to install the Snort software onto your
system.
Snort is a Network Intrusion Detection System (NIDS) that performs real-
time traffic analysis and packet logging on IP networks. Snort performs
protocol analysis, content searching/matching and is used to detect a variety
of attacks and probes, such as buffer overflows, stealth port scans, CGI
attacks, SMB probes, OS fingerprinting attempts, and so on. Snort uses a
flexible rules language to describe traffic that it should collect or pass, as well
as a detection engine that utilizes a modular plug-in architecture. Snort has a
real-time alerting capability as well, incorporating alerting mechanisms for
syslog, a user specified file, a UNIX socket, or WinPopup messages to
Windows clients using Samba's smbclient.
To download the Snort software onto your system, complete the
following:
1 Log into your system as root.
2 Locate the file app-Snort-x.x-x.x.x.x.7xCOS.i686.rpm
following command:
[root@xxxxx rpm]# rpm -i app-Snort-x.x-x.x.x.x.7xCOS.i686.rpm
This installs Snort on your system. For further information about the Snort
configuration, refer to www.snort.org website.
System
1
and execute the
Advertisement
Table of Contents
