Hello Kam,
PacketFence doesn't support local snort/suricata but just remote.
What you can do is to install security onion on another server and
configure it to send the alert to the packetfence server. (see doc).
I am also agree that there is still references in the documentation on
the local snort/suricata config, i will remove them.
Regards
Fabrice
Le 2017-10-04 à 01:57, kam thang via PacketFence-users a écrit :
>
> Hi Guys,
>
> I'm planning to enable snort on packetfence but when i look for the
> snort conf in packetfence on the location /usr/local/pf/var/conf ... i
> couldn't find the snort.conf anywhere.... can you please help...
>
> OS: CentOS7 64bit
> Packetfence : yum installed packetfence-release-1.2-5.1.noarch.rpm
>
> Snort installed 2.9.9.0
>
>
> Thanks,
> Kam
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
