Comments on: Snort 2.8.5.2 Inline + BASE on Ubuntu

By: herbert

herbert — Thu, 09 Sep 2010 09:42:10 +0000

Thank you for your effort on the tutorial.
Please help!

I finished configuring snort online according to your script, but when i put it between a network and my laptop, I realise that when snortd is not yet running my laptop can access network, but when I start snort, after a short time, the connection to my laptop will break and never comes back again

when I stop the snortd then one of the messages will be “Snort_inline no process found”

for this I am wondering whether the snort – inline is running at all

When I look into the base, I do not notice anything

please can you help me

By: AbuM@lek

AbuM@lek — Fri, 18 Jun 2010 14:20:35 +0000

Hi,

Try to give the file right of execution.

# chmod +x snortd

Regards.

By: budd

budd — Tue, 01 Jun 2010 17:04:49 +0000

i just finished installing snort with your tutorial
but in the end i got error like this :
-bash: /etc/init.d/snortd: Permission denied

can u help me about this

thanks before

By: sojen

sojen — Mon, 24 May 2010 22:29:52 +0000

hi there
thnks a lot, great tuto

just can’t get snortrules-snapshot-CURRENT.tar.gz

can u help me with this

thanks again

By: cpratt

cpratt — Mon, 12 Apr 2010 14:39:17 +0000

iptables-dev was installed in one of the prereq’s at the top of the post. My understanding is all the packets are queued in iptables for snort to then analyze before sending down the line.

By: Jachect

Jachect — Sun, 11 Apr 2010 04:24:25 +0000

Where do you use install the iptables? how the iptables is affecting the snort? do you have it in the same machine that is the snort?

I have install the snort in my ubuntu but until this moment i havent be able to run it with the iptables, please help

Thanks

By: cpratt

cpratt — Wed, 10 Mar 2010 07:46:05 +0000

Try I believe that is where I got a version that worked for me. You might need to try a couple of those links until you find one that downloads.

By: justin

justin — Wed, 10 Mar 2010 05:49:11 +0000

Where did you get your version of libnet from? I’m getting errors from the current on sourceforge, and the packetlife link doesn’t appear to work.

Thanks!