#snort start
-*> Snort ! <*-
............
................
< !-- cac thong bao cua snort  -->


----------------
A value of 0 will read the pcap until Snort í killed.
ERROR:
Uh, You need to tell me to do something ...
Fata Eroror, Quitting ..

snort -c/root/snort-2.8.0.1/etc/snort.conf
.....
<!-----cac thong bao cua snort  ( khá hoàn chỉnh)
với đoạn cuối như sau: -------->
Not Using PCAP_FRAMES

tar zxvf  snort-2.4.5.tar
# cd snort-2.4.5.tar
# ./configure –with-mysql
# make
# make install
# mkdir /etc/snort
# cp *.rules classification.config snort.conf /etc/snort/

# mysql -u root -p
mysql> create database snort;
mysql> grant INSERT,SELECT on snort.* to ‘snort’@’localhost’ identified by ‘123456’;
mysql> exit
# mysql snort -u root -p < ./contrib/create_mysql

Sửa các thông số trong file /etc/snort/snort.conf
[code]output database: log, mysql, user=snort password=123456 dbname=snort host=localhost
output database: alert, mysql, user=snort password=123456 dbname=snort host=localhost

/usr/local/bin/snort -D -d -v -i eth0 -c /etc/snort/snort.conf

# cp acid-0.9.6b21.tar.gz /var/www/html
# tar zxvf acid-0.9.6b21.tar.gz
# cp adodb190.tgz /var/www/html
# tar zxvf adodb190.tgz
# cp phplot-4.4.6.tar.gz /var/www/html
# tar zxvf phplot-4.4.6.tar.gz

mysql> create database snort_archive;
mysql> grant INSERT,SELECT on snort.* to ‘snort_archive’@localhost identified by ‘123456’;
mysql> exit
# mysql snort -u root -p < create_acid_tbls_mysql.sql

$DBlib_path = “../adodb”;$DBtype = “mysql”;/* Alert DB connection parameters */

$alert_dbname = “snort”;
$alert_host = “localhost”;
$alert_port = “”;
$alert_user = “snort”;
$alert_password = “123456”;

/* Archive DB connection parameters */

$archive_dbname = “snort_archive”;
$archive_host = “localhost”;
$archive_port = “”;
$archive_user = “snort”;
$archive_password = “123456”;

$ChartLib_path = “../phplot-4.4.6″; // tuỳ chọn, nếu php hỗ trợ gd

/* File format of charts (’png’, ‘jpeg’, ‘gif’) */
$chart_file_format = “png”;