Re: What to do?

[James Lay <digitalx00 () gmail com>]

On Nov 21, 2013, at 2:27 AM, Ellad G. Yatsko <eyatsko () ngs ru> wrote:

> Hello!
>
> We have Ubuntu Server 12.04.1 LTS with snort 2.9.2 - both installed from 
> scratch. Snort 2.9.2 distribution is native for this Ubuntu Release.
>
> ~# snort --daq-list
> Available DAQ modules:
> pcap(v3): readback live multi unpriv
> ipfw(v2): live inline multi unpriv
> dump(v1): readback live inline multi unpriv
> afpacket(v4): live inline multi unpriv
> ~#
[redacted]
> Please, help... :-)
>
> Kind regards,
> Ellad Yatsko

I run the same OS, and while Ubuntu is great for keeping some things up to date, at the speed at which Snort is 
updated, you’re only real option is to go from source.  2.9.2 is ancient…I’d install 2.9.5.5 so you can get the full 
ruleset.  Keep in mind it’s not going to be pretty as you’ll most likely have to rip out the current Snort.

James


------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!