PDA

View Full Version : Snortsam 2.33 & CHX-I or 8signs

Jazzie1
July 11th, 2005, 01:57 AM
Hi All!

Frank Knobbe over at Snortsam, decided to release another version of Snortsam (2.33)! It has various fixes to the source code, not to mention a CHX-I plugin fix, that addressed the logging option to be passed correctly! You can find more info at:

Snortsam (http://www.snortsam.net/news.html)

Regards
Jazzie
Trespasser
July 11th, 2005, 08:55 AM
Jazzie,
Does Snort and Snortsam work with dialup? I Googled this question but couldn't find an answer.
Jazzie1
July 11th, 2005, 01:45 PM
Hi, Snort does, but would you really want to?? Snort and or Snortsam should be used in conjunction to protect a dedicated server! It isn't meant for workstations! Unless your intentions are something other...

Regards
Jazzie
Syncman9
July 11th, 2005, 03:10 PM
Jazzie1,

Your right, but it can be made to work on a workstation, but I'm not sure about with dial up. I've set it up on mine, but my connection is via ethernet.
Jazzie1
July 12th, 2005, 01:58 AM
Syncman9-

Yes it can for testing purposes/packet analyzing. Works rather well with an ethernet tap!:) I like the fact that Snortsam and CHX-I or even 8signs, will work as an auto-block IPS to monitor inbound traffic on a file server. I have a write-up for 8signs over at Snortsam.net:

http://www.snortsam.net/files/snortsam-v2_multi-threaded/docs/README_8signs.rtf

Which, can be easily be converted over to configure Snortsam & CHX-I!
Just need to change a few variables in the script.

Regards
Jazzie