Snort tutorials

[J-Tek]

Yo,

Hey, I've just started using snort. Ive got it running but I really dont know how to use it. Interpret the Results. Any tuts out there that you want to share?

Thanx,

[demian]

Uhmm did you ever think about looking on the snort homepage (http://www.snort.org)? There's the User's manual (http://www.snort.org/docs/writing_rules/) (also available as pdf-file (http://www.snort.org/docs/SnortUsersManual.pdf)), a very extensive set of FAQs (http://www.snort.org/docs/faq.html) along with more stuff (http://www.snort.org/documentation.html). Also searching google (http://www.google.org/linux/) comes up with tons of things. Like an article at linuxsecurity.com (http://www.linuxsecurity.com/feature_stories/feature_story-49.html) and another one at linuxjournal.com (http://www.linuxjournal.com/article.php?sid=4668) among much, much more (http://www.google.com/linux?restrict=linux&hl=en&q=%2Bsnort+%2Btutorial&btnG=Google+Search)