Snort

From ImageStream Router Documentation

Overview

Snort is an Intrusion Detection System add-on package for ImageStream Linux. Routers running Snort can detect, log and provide alerts for network-based intrusion attempts.

A complete IDS setup consists of:

• Snort sensor running on an ImageStream Router
• Alert and Logging Collector
• Front-end for reporting on alerts.

The Snort add-on requires the add-on hard drive service to be configured and running prior to installation.

Installation

Installing Snort

Documentation and futher reading

• (Coming soon) /Troubleshooting - Tips to help track down common problems
• (Coming soon) /FAQ - ImageStream Snort FAQ
• (Coming soon) /Glossary - Glossary of Snort Terms
• http://www.snort.org/docs/ - Official Snort documentation