Any Snort guru's/user's out there???

[mcseguy9]

I recently got into security and want to play around with snort. I'll be using it in a Win32 environment on a NT 4 Server. I've downloaded what I believe is everything I need to get it going, including the snort gui, snort panel. I've read a lot of the information but after doing so I feel almost as lost as before reading it all.

I could use some advice, tips, help, and anyone who's used or uses this on NT I would appreciate your help in knowing where to go and what to do.

Basically, I want to use it on a single computer that will be out on the Internet. I will be attempting to break into this PC and want snort to log what I'm doing.

Again, any help would be awesome. Thanks.

[daveleau]

I am not familiar with SNORT but why do you chose it? What are the benefits? Thanks for the info. I have gone to their site at www.snort.org (http://www.snort.org) and it appears interesting.

Thanks
Davr

[mcseguy9]

I chose it because it's free, for one. Another reason is because I've heard it's good, too. With the IDSCenter front end for setting it up it wasn't difficult to get it up and running. My main thing now is trying to understand what all of the data means. There are a few others I want to try, as well, if snort turns out to not work for me.

[daveleau]

Cool. Please let us (me) know how it turns out and what you think of it. I am very interested.

THanks
Dave

[psyklone]

snort is a great program, i'm sure you're going to like it ... however if you're just getting into security don't get too used to the graphic front-end for the win32 version because chances are you won't be using windows for too much longer.

cheers,

-psyklone