RE: SNMP traps in Snort

From: Robert D. Hughes (rob@robhughes.com)
Date: 12/30/01 

Date: Sun, 30 Dec 2001 08:00:23 -0600
From: "Robert D. Hughes" <rob@robhughes.com>
To: <focus-ids@securityfocus.com>

There is a windows agent, version 4.1.2, available at
http://sourceforge.net/project/showfiles.php?group_id=12694. It should
at least let you build snort with --with-snmp. You'll also need to
install openssl, or does snort use the MS ssl encryption libraries on
windows or does that dependency even apply?

-----Original Message-----
From: Martin Roesch [mailto:roesch@sourcefire.com]
Sent: Thursday, December 27, 2001 10:22 AM
To: Daniel Adler; focus-ids@securityfocus.com
Subject: Re: SNMP traps in Snort

Snort's SNMP code relies on the UCD SNMP library, so if there's a port
of it
to Windows (or if it works natively) then you should be able to compile
up
Snort with SNMP support natively on win32. I haven't tried this.

     -Marty

On 12/26/01 11:25 AM, "Daniel Adler" <DanielA@ectel.com> wrote:

>
>
> Hello All,
>
> Does anyone know whether there is a Snort version
> for windows that supports event notification through
> SNMP traps?
>
> If you are familiar with other IDS freeware that
> supports this function I would appreciate it a lot.
>
> Thanks,
> Daniel Adler.
> 

-- 
Martin Roesch - Founder/CEO Sourcefire Inc. - (410) 552-6999
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch@sourcefire.com - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org

Relevant Pages

  • Re: SNMP traps in Snort
    ... Snort's SNMP code relies on the UCD SNMP library, so if there's a port of it ... to Windows then you should be able to compile up ... Snort with SNMP support natively on win32. ... Snort: Open Source Network IDS - http://www.snort.org ...
    (Focus-IDS)
  • Re: Snort as Firewall (WinXP)
    ... Linux is much much simpler that windows .. ... I've come to the conclusion that Snort definitly won't give me ... Subject: Snort as Firewall (WinXP) ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • When does a scan attempt become a focused attack?
    ... I recently set up snort to look for intrusions and am still learning to ... The snort box is Windows and the attacker is happily ... Certified Network & Systems Engineer ... network analyzers. ...
    (Security-Basics)
  • Locking down Snort
    ... You didn't say whether you are using windows or linux Snort. ... when you said IPtables you were referring to *nix, ... port scan on those ports? ...
    (Security-Basics)
  • RE: Need recommendations about IDS Systems
    ... Snort.org has ports to windows available for download. ... Need recommendations about IDS Systems ... I've never found Snort for the Windows ...
    (Security-Basics)