Hello, Does anyone know a good resource/walkthrough for integrating Snort with Packetfence? The Snort section in the PacketFence Administration Guide is pretty small and I wasn't able to get it working after yum installing snort nor gain a sense of how PacketFence interacted with Snort running locally. (I am a Snort newbie and this is literally the first time I have ever used Snort). When starting PacketFence the script lists snort start but when I issue the command service packetfence status it lists Snort as 0|0. Snort does not appear with the other services on the web interface status>services. When I do a service snortd status I get "snort dead but subsys locked."
I want to run Snort locally on the same machine (Centos 6.4) as PacketFence (version 4.0.6-2). I have a eth1 interface that has a SPAN on all the network traffic I want to monitor. I am doing this for a school project, any help will be greatly appreciated. -Jason ------------------------------------------------------------------------------ Sponsored by Intel(R) XDK Develop, test and display web and hybrid apps with a single code base. Download it for free now! http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
