This document describes the steps for install and setting up Snort the opensource intrustion detection system. It also describes the process for updating the signature definitions. Snort is an opensource IDS (Intrusion Detection System) written and maintained by a company called sourcefire. It is one of the best IDS available and is free (Kinda).

Downloading Snort

Since we us Redhat Enterprise Linux 5 here go to the snort download page and select snort-2.8.5.2-1.RH5.i386.rpm. Since we will also be using the BASE web interface to view the alerts also download the snort-mysql-2.8.5.2-1.RH5.i386.rpm...

Read More