Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [Snort-users] Oinkmaster installation for snort |
|---|---|
| Date: | Mon, 20 Mar 2006 22:35:14 -0800 (PST) |
I installed oinkmaster to manage my snort rules. I configured it to send me mail after the download is complete and also to backup my old rules prior to downloading the new set.My rules are in directory /etc/snort and I am using snort version 2.3 I have not received mail about the updates and the backup folder is empty. I checked in /var/log/messages and there was no message about oinkmaster.Please assist. Below are my installation steps. cd /usr/local/src/ mkdir oinkmaster mv oinkmaster-1.2.tar.gz oinkmaster cd oinkmaster tar ?zxvf oinkmaster-1.2.tar.gz cd oinkmaster 1.2 cp oinkmaster.pl /usr/bin cp oinkmaster.conf /etc/ cd contrib. cp makesidex.pl /etc chown -R snort:snort /etc/snort vi /etc/oinkmaster.conf At this stage I edited the line to look like below and inserted my oinkcode url = http://www.snort.org/pub-bin/oinkmaster.cgi/oinkcode /snortrules-snapshot-2.3.tar.gz cd /etc ./makesidex.pl /etc/snort/rules >autodisable.conf mkdir /etc/snort/backup chown -R snort:snort /etc/snort/backup cd /usr/bin touch oinkdaily chmod +x oinkdaily vi oinkdaily I added the following line to the oinkdaily file oinkmaster.pl -C /etc/oinkmaster.conf -C /etc/autodisable.conf -o /etc/snort/rules -b /etc/snort/backup 2>&1 | mail -s "oinkmaster" hkiyimba@bou.or.ug Then I scheduled snort to download the rules crontab ?u snort ?e 30 5 * * * /usr/bin/oinkdaily Any help will be appreciated --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [Snort-users] Deep Snort: Inside the Nose of the Pig - Dojo at CanSecWest, April 4th, Dragos Ruiu |
|---|---|
| Next by Date: | [Snort-users] Snort 2.6 and Barnyard, sekure |
| Previous by Thread: | [Snort-users] Deep Snort: Inside the Nose of the Pig - Dojo at CanSecWest, April 4th, Dragos Ruiu |
| Next by Thread: | [Snort-users] Snort 2.6 and Barnyard, sekure |
| Indexes: | [Date] [Thread] [Top] [All Lists] |