installing snort

2010-02-19 Thread Jari Fredriksson
aptitude install snort will not create /etc/snort.conf nor the rule files in /etc/snort/rules If I think that it should, am I wrong? Debian Lenny 32-bit with backports. -- http://www.iki.fi/jarif/ Consider well the proportions of things. It is better to be a young June-bug than an old bird

Re: installing snort

2010-02-19 Thread Jordan Metzmeier
Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information such as this. Jordan Metzmeier On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson

Re: installing snort

2010-02-19 Thread Jari Fredriksson
On 19.2.2010 18:00, Jordan Metzmeier wrote: Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information such as this. meta-package (?) snort

Re: installing snort

2010-02-19 Thread Jari Fredriksson
On 19.2.2010 19:33, Jari Fredriksson wrote: On 19.2.2010 18:00, Jordan Metzmeier wrote: Sounds like you want the package snort-rules-default. This is in the Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get familiar with searching the /usr/share/doc directory for information

Re: installing snort

2010-02-19 Thread Jordan Metzmeier
So you are saying you have installed the snort-rules-default package but the /etc/snort/rules/ directory remains missing? Doing something manually could cause dpkg to not write the config files (although I have typically only seen this when you delete a config file installed by a package and then

Re: installing snort

2010-02-19 Thread Jari Fredriksson
On 19.2.2010 19:56, Jordan Metzmeier wrote: So you are saying you have installed the snort-rules-default package but the /etc/snort/rules/ directory remains missing? Doing something manually could cause dpkg to not write the config files (although I have typically only seen this when you