Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]

[Snort-users] Oinkmaster installation for snort

Subject: [Snort-users] Oinkmaster installation for snort
Date: Mon, 20 Mar 2006 22:35:14 -0800 (PST)
I installed oinkmaster to manage my snort rules. I configured it to send me 
mail after the download is complete and also to backup my old rules prior to 
downloading the new set.My rules are in directory /etc/snort and I am using 
snort version 2.3
   
  I have not received mail about the updates and the backup folder is empty. I 
checked in /var/log/messages and there was no message about oinkmaster.Please 
assist. 
   
  Below are my installation steps. 
   
  cd /usr/local/src/
  mkdir oinkmaster
  mv oinkmaster-1.2.tar.gz oinkmaster
  cd oinkmaster
  tar ?zxvf oinkmaster-1.2.tar.gz
  cd oinkmaster 1.2
  cp oinkmaster.pl  /usr/bin
  cp oinkmaster.conf  /etc/
  cd contrib.
  cp makesidex.pl /etc
  chown -R snort:snort /etc/snort
  vi /etc/oinkmaster.conf
   
  At this stage I edited the line to look like below and inserted my oinkcode
   
  url = http://www.snort.org/pub-bin/oinkmaster.cgi/oinkcode 
/snortrules-snapshot-2.3.tar.gz
   
  cd /etc
  ./makesidex.pl /etc/snort/rules >autodisable.conf
  mkdir /etc/snort/backup
  chown -R snort:snort /etc/snort/backup
  cd /usr/bin
  touch oinkdaily
  chmod +x oinkdaily
  vi oinkdaily
   
  I added the following line to the oinkdaily file
  oinkmaster.pl -C /etc/oinkmaster.conf -C /etc/autodisable.conf -o 
/etc/snort/rules -b
  /etc/snort/backup 2>&1 | mail -s "oinkmaster" hkiyimba@bou.or.ug 
   
  Then I scheduled snort to download the rules
   
  crontab ?u snort ?e
  30 5 *  *  * /usr/bin/oinkdaily
   
  Any help will be appreciated
   
   

                
---------------------------------
 Yahoo! Mail
 Use Photomail to share photos without annoying attachments.
<Prev in Thread] Current Thread [Next in Thread>
  • [Snort-users] Oinkmaster installation for snort, Hubert Edward kIYIMBA <=