anyone has experience running Snort on Linux

[loekanle]

I want to configure snort but dont have a clue
when I go to applications and try to open it nothing happens

and I want to no the difference between snort Msyql and regular snort which is better to have

[exklusve]

More info might help.
What OS are you running?
What do you want to use Snort for?
etc etc etc.

In all honesty, dont take this wrong, if you can't get Snort running the info you get from Snort probably will not only be useless to you, but more confusing that the problem you have now.

[Rhythm of Life]

NVM read your other post.

Best of luck but I have no experience with it as I only have 3 PCs on my network and no public IP.

[blakdawg]

database-backed snort makes more sense if you're going to collect a lot of data. probably not worth the effort to configure if you're just goofing around.

[shooterfpga]

it probably doesnt do anything, because you havent logged files yet. mysql snort is exactly that, it logs your snort files to a mysql db. you must have mysql configured already. what distro are you running, it'll be easier to tell you how to configure snort for your specific distro.

[loekanle]

Ubuntu 11.04 I want it for intrusion detection

[exklusve]

Give us an idea of your network.
Type of internet service, do you have the router/switch/wifi router from the ISP? Do you have any other AP's or switches on your network? How many PC's are connected and are they connected through wifi or are they wired?

[ibanezfoo]

Just go load EasyIDS and it will all be done for you... Setting up Snort from scratch is a fun challenge, but a challenge nonetheless.

You will have to set up a mirrored or monitoring port on your switch though to point at it or it will hardly see anything other than broadcast traffic.

I prefer using NTOP to display WTF is going on with the network.

http://www.skynet-solutions.net/About-EasyIDS

Skynet... yeah

[Akers]

Are you using it for IDS? or ? We run it as an IDS in out 2500 user 2PB environment and it works well. What where you looking to learn?