1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] [changelog] [RPM] cauldron core/release snort-2.9.4-1.mga3
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20%5Bchangelog%5D%20%5BRPM%5D%20cauldron%20core/release%0A%09snort-2.9.4-1.mga3&In-Reply-To=%3C50BDB4C3.4070302%40gmail.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="020771.html">
<LINK REL="Next" HREF="020559.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] [changelog] [RPM] cauldron core/release snort-2.9.4-1.mga3</H1>
<B>Guillaume Rousse</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20%5Bchangelog%5D%20%5BRPM%5D%20cauldron%20core/release%0A%09snort-2.9.4-1.mga3&In-Reply-To=%3C50BDB4C3.4070302%40gmail.com%3E"
TITLE="[Mageia-dev] [changelog] [RPM] cauldron core/release snort-2.9.4-1.mga3">guillomovitch at gmail.com
</A><BR>
<I>Tue Dec 4 09:30:59 CET 2012</I>
<P><UL>
<LI>Previous message: <A HREF="020771.html">[Mageia-dev] [changelog] [RPM] cauldron core/release pcre-8.32-5.mga3
</A></li>
<LI>Next message: <A HREF="020559.html">[Mageia-dev] strange GTK theme issue under KDE
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#20553">[ date ]</a>
<a href="thread.html#20553">[ thread ]</a>
<a href="subject.html#20553">[ subject ]</a>
<a href="author.html#20553">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Le 04/12/2012 03:12, dlucio a écrit :
><i> Description :
</I>><i> Snort is a libpcap-based packet sniffer/logger which can be used as a
</I>><i> lightweight network intrusion detection system. It features rules based logging
</I>><i> and can perform protocol analysis, content searching/matching and can be used
</I>><i> to detect a variety of attacks and probes, such as buffer overflows, stealth
</I>><i> port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.
</I>><i> Snort has a real-time alerting capabilty, with alerts being sent to syslog, a
</I>><i> separate "alert" file, or as a WinPopup message via Samba's smbclient
</I>This is perfectly enough as package description. Everything else is
package usage documentation, and should go elsewhere, such as a
README.mga file.
><i> This rpm is different from previous rpms
</I>Which ones ?
><i> and while it will not clobber
</I>><i> your current snort file, you will need to modify it.
</I>As for every other package.
><i> There are 9 different packages available
</I>><i>
</I>><i> All of them require the base snort rpm. Additionally, you will need
</I>><i> to chose a binary to install.
</I>><i>
</I>><i> /usr/sbin/snort should end up being a symlink to a binary in one of
</I>><i> the following configurations. We use update-alternatives for this.
</I>><i> Here are the different packages along with their priorities.
</I>><i>
</I>><i> plain(10) plain+flexresp(11) mysql(12)
</I>><i> mysql+flexresp(13) postgresql(14) postgresql+flexresp(15)
</I>><i> bloat(16) inline(17) inline+flexresp(18)
</I>><i> prelude(19) prelude+flexresp(20)
</I>The day you'll modify those priorities, you'll have to modify those
values too.
><i> Please see the documentation in /usr/share/doc/snort
</I>As for every other package.
--
BOFH excuse #388:
Bad user karma.
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="020771.html">[Mageia-dev] [changelog] [RPM] cauldron core/release pcre-8.32-5.mga3
</A></li>
<LI>Next message: <A HREF="020559.html">[Mageia-dev] strange GTK theme issue under KDE
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#20553">[ date ]</a>
<a href="thread.html#20553">[ thread ]</a>
<a href="subject.html#20553">[ subject ]</a>
<a href="author.html#20553">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
