Applications/Internet

snort: Intrusion detection system

Name:snort Vendor:
Version:2.4.4 License:GPL
Release:4.al2 URL:http://www.snort.org
Summary
Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. Snort has a real-time alerting capabilty, with alerts being sent to syslog, a seperate "alert" file, or as a WinPopup message via Samba's smbclient Edit /etc/snort.conf to configure snort and use snort.d to start snort This rpm is different from previous rpms and while it will not clobber your current snortd file, you will need to modify it. There are 9 different packages available All of them require the base snort rpm. Additionally, you will need to chose a binary to install. /usr/sbin/snort should end up being a symlink to a binary in one of the following configurations: plain plain+flexresp mysql mysql+flexresp postgresql postgresql+flexresp snmp snmp+flexresp bloat mysql+postgresql+flexresp+snmp Please see the documentation in /usr/share/doc/snort-2.4.4 There are no rules in this package the license they are released under forbids us from repackaging them and redistributing them.

Arch: sparc

Download:snort-2.4.4-4.al2.sparc.rpm
Build Date:Wed Jun 7 00:15:59 2006
Packager:
Size:1.65 MiB

Arch: src

Download:snort-2.4.4-4.al2.src.rpm
Build Date:Tue Jun 6 23:46:18 2006
Packager:
Size:2.72 MiB

Changelog

* Fri Jun 2 17:00:00 2006 Dennis Gilmore <dennis{%}ausil{*}us> - 2.4.4-4
- fix CVE-2006-2769 
  Snort URIContent Rules Detection Evasion Vulnerability
- fix bug #190102
* Fri Mar 31 16:00:00 2006 Dennis Gilmore <dennis{%}ausil{*}us> - 2.4.4-3
- make initscript  not a config file
- own /etc/snort
* Wed Mar 29 16:00:00 2006 Dennis Gilmore <dennis{%}ausil{*}us> - 2.4.4-2
- Add fedora README
- do make clean to make sure that each configure runs properly

Listing created by RepoView-0.5.2-1.fc5