SNORT BASIC USAGE INSTALLATION

SNORT BASIC USAGE INSTALLATION FOR WINDOWS

1.Download windows installer here

http://www.snort.org/snort-downloads

Select the one below and download
Snort_2_9_2_Installer.exe

2.Install it by double clicking,make sure you are logged
in as Admin or use Runas.

3.Download the rule-set here

http://www.snort.org/snort-rules/#rules

Note have to be a registered user to download the Rules
which will be 30 Days old.Latest Rules one has to buy.

4.Extract the Rules using winrar , can download all
the rules or any one rule-set for a demo,copy and
paste the rules in the rules folder under C:\Snort\rules.

5.Install WinPcap from here.

http://www.winpcap.org/


6.C:\Snort\bin>snort -W command to show all available interfaces.

SNORT uses the first interface by default.



7.Changes in the config file under C:\Snort\etc

Change the IP address on the top to the IP address being protected

and next any external IP's
change the Rules path to C:\Snort\rules


7.In a Network setup SNORT is placed in a DMZ


http://www.youtube.com/watch?v=nAWN989WA0A