I have done that i have a /etc/snort/snort.conf file but it seems to me i need to register snortprofile with prelude which is done by running a command like this:
$ prelude-adduser register snort "idmef:w admin:r" <manager address> --uid X --gid X
Problem is i don't have prelude-adduser command. So i run this:
sensor-adduser --sensorname snort --manager-addr 192.168.0.1 "idmef:w admin:r" --uid 1002
After that i get error like this and i have no idea where to from there:
Enter registration one shot password :*******
Please confirm one shot password :*******
connecting to Manager host (localhost:5553)... couldn't connect to localhost.
Thing is what runs on localhst port 5553??!?!
This is all very confusing.