snort

[Jatt187]

Hi,
Does anybody know of any good tutorials that can help use snort for windows.

thank you

[nihil]

You might make a start by registering here:

http://www.snort.org/

and looking here:

http://www.bleedingsnort.com/

It is very difficult for anyone to answer your question without some idea of what you already know and understand, and with out more specifics.

[Jatt187]

I am a newbie to snort and have no experience on how to use it, but i have registered.

I just wanted to see if anybody had any useful links to tutorials that would help a newbie learn snort.

[Spyrus]

Try these:

http://www.antionline.com/showthread...ighlight=snort
http://www.antionline.com/showthread...ighlight=snort
http://www.antionline.com/showthread...ighlight=snort
http://www.antionline.com/showthread...ighlight=snort

Cheers

[phishphreek]

You are probably better off just downloading the official documentation. (take the pdf to kinkos or any other print place and they'll print it out and bind it for you. i have a machine at work that does this and it is the best way i've found.)

The tutorials out there are most likely outdated. Snort changes so frequently that the only way to stay up to date is with the official documentation.

snort 2.4 docs
http://www.snort.org/docs/snort_manu...ort_manual.pdf

snort 2.6 docs
http://www.snort.org/docs/snort_manu...ort_manual.pdf

I'm in the process of testing an upgrade to 2.6... there are considerable changes between 2.4 and 2.6 as far as preprocessors, dynamic processors and configs are concerned. fun stuff!