Snort Installation Scenarios

27

Figure 2 1 Distributed Snort installation with the help of tools like SCP and Barnyard.

As mentioned in Chapter 1, the ultimate objective of this book is to help you

install Snort and to make all of these packages work with each other. When you go

through this book, you will see how these components act with each other to build a

complete working intrusion detection system. The website for this book http://

authors.phptr.com/rehman/ contains all of these packages in the source code form. You

will also find scripts on the site that are very helpful in installing these packages on a

new system with no hassle. In fact, by using the scripts on the site as discussed in this

book, you should be able to have a working IDS by just using a few commands as the

root user. If you use a version newer than that discussed in this book, the latest versions

of the scripts that support new Snort versions can be downloaded from http://

www.argusnetsec.com/downloads.

This books details the installation of these components on a RedHat Linux version

7.3 machine. But the process is similar on other platforms and other versions of RedHat

Linux. All components are installed under /opt directory for the purpose of this book.

However, when a pre compiled package is used, the location of files may be different.

When you use the scripts in the book or from the website, files will be installed under