Re: installing snort
So you are saying you have installed the snort-rules-default package
but the /etc/snort/rules/ directory remains missing? Doing something
manually could cause dpkg to not write the config files (although I
have typically only seen this when you delete a config file installed
by a package and then attempt to reinstall).
If this is the case reinstall snort-rules-default with `aptitude -o
DPkg::Options::="--force-confmiss" reinstall snort-rules-default`. You
can view what config files should be present with `dpkg -L
On Fri, Feb 19, 2010 at 12:33 PM, Jari Fredriksson <firstname.lastname@example.org> wrote:
> On 19.2.2010 18:00, Jordan Metzmeier wrote:
>> Sounds like you want the package snort-rules-default. This is in the
>> Q/A section of /usr/share/doc/snort/README.Debian.gz. You should get
>> familiar with searching the /usr/share/doc directory for information
>> such as this.
> meta-package (?) snort loads this snort-rules-default, but nothing comes
> in /etc/snort.
> I even tried to load it manually (before asking here), but no joy.
>> Jordan Metzmeier
>> On Fri, Feb 19, 2010 at 10:32 AM, Jari Fredriksson <email@example.com> wrote:
>>> aptitude install snort
>>> will not create /etc/snort.conf nor the rule files in /etc/snort/rules
>>> If I think that it should, am I wrong?
>>> Debian Lenny 32-bit with backports.
> You are dishonest, but never to the point of hurting a friend.