installing snort
aptitude install snort will not create /etc/snort.conf nor the rule files in /etc/snort/rules If I think that it should, am I wrong? Debian Lenny 32-bit with backports. -- http://www.iki.fi/jarif/ Consider well the proportions of things. It is better to be a young June-bug than an old bird of paradise. -- Mark Twain, Pudd'nhead Wilson's Calendar signature.asc Description: OpenPGP digital signature
Re: installing snort
Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information such as this. Jordan Metzmeier On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson ja...@iki.fi wrote: aptitude install snort will not create /etc/snort.conf nor the rule files in /etc/snort/rules If I think that it should, am I wrong? Debian Lenny 32-bit with backports. -- http://www.iki.fi/jarif/ Consider well the proportions of things. It is better to be a young June-bug than an old bird of paradise. -- Mark Twain, Pudd'nhead Wilson's Calendar -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/50e5edd51002190800j4e10a52eua9baa5a99304d...@mail.gmail.com
Re: installing snort
On 19.2.2010 18:00, Jordan Metzmeier wrote: Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information such as this. meta-package (?) snort loads this snort-rules-default, but nothing comes in /etc/snort. I even tried to load it manually (before asking here), but no joy. Jordan Metzmeier On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson ja...@iki.fi wrote: aptitude install snort will not create /etc/snort.conf nor the rule files in /etc/snort/rules If I think that it should, am I wrong? Debian Lenny 32-bit with backports. -- http://www.iki.fi/jarif/ You are dishonest, but never to the point of hurting a friend. signature.asc Description: OpenPGP digital signature
Re: installing snort
On 19.2.2010 19:33, Jari Fredriksson wrote: On 19.2.2010 18:00, Jordan Metzmeier wrote: Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information such as this. meta-package (?) snort loads this snort-rules-default, but nothing comes in /etc/snort. I even tried to load it manually (before asking here), but no joy. Ok, I commanded aptitude install snort on an another machine, and it worked! Copied the /etc/snort from there. Jordan Metzmeier On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson ja...@iki.fi wrote: aptitude install snort will not create /etc/snort.conf nor the rule files in /etc/snort/rules If I think that it should, am I wrong? Debian Lenny 32-bit with backports. -- http://www.iki.fi/jarif/ You are dishonest, but never to the point of hurting a friend. signature.asc Description: OpenPGP digital signature
Re: installing snort
So you are saying you have installed the snort-rules-default package but the /etc/snort/rules/ directory remains missing? Doing something manually could cause dpkg to not write the config files (although I have typically only seen this when you delete a config file installed by a package and then attempt to reinstall). If this is the case reinstall snort-rules-default with `aptitude -o DPkg::Options::=--force-confmiss reinstall snort-rules-default`. You can view what config files should be present with `dpkg -L snort-rules-default` On Fri, Feb 19, 2010 at 12:33 PM, Jari Fredriksson ja...@iki.fi wrote: On 19.2.2010 18:00, Jordan Metzmeier wrote: Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information such as this. meta-package (?) snort loads this snort-rules-default, but nothing comes in /etc/snort. I even tried to load it manually (before asking here), but no joy. Jordan Metzmeier On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson ja...@iki.fi wrote: aptitude install snort will not create /etc/snort.conf nor the rule files in /etc/snort/rules If I think that it should, am I wrong? Debian Lenny 32-bit with backports. -- http://www.iki.fi/jarif/ You are dishonest, but never to the point of hurting a friend. -- Jordan Metzmeier -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/50e5edd51002190956q70f1becel40f803d90127f...@mail.gmail.com
Re: installing snort
On 19.2.2010 19:56, Jordan Metzmeier wrote: So you are saying you have installed the snort-rules-default package but the /etc/snort/rules/ directory remains missing? Doing something manually could cause dpkg to not write the config files (although I have typically only seen this when you delete a config file installed by a package and then attempt to reinstall). If this is the case reinstall snort-rules-default with `aptitude -o DPkg::Options::=--force-confmiss reinstall snort-rules-default`. You can view what config files should be present with `dpkg -L snort-rules-default` Thanks, I did this, hopefully the installation now is ok. But now I have the problem that Lenny snort is no longer supported by snort rules. We need snort 2.8 as that is what the rules are updated for. signature.asc Description: OpenPGP digital signature
