Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How can be integrated an existing snort with a new OSSIM deployment?

0
Posted

How can be integrated an existing snort with a new OSSIM deployment?

0

The Snort shipped with OSSIM has some modifications, and we suggest to use this. Anyway, if you have your own snort, you can integrate it with OSSIM installing an ossim-agent in the same machine than the snort: First you need to activate the download of the right OSSIM packets. Follow the point 0.2 Apt configuration in http://www.ossim.net/dokuwiki/doku.php?id=installation:debian#apt_configuration . Remember that if you want to upgrade your own snort, you should change this later to get it from the debian repository, and not from the OSSIM one.

Related Questions

Thanksgiving questions

*Sadly, we had to bring back ads too. Hopefully more targeted.