Fedora 11: FEDORA-2009-10999 Important: OpenSSH Vulnerability Patch

Snort is a libpcap-based packet sniffer/logger which

can be used as a lightweight network intrusion detection system.

It features rules based logging and can perform protocol analysis,

content searching/matching and can be used to detect a variety of

attacks and probes, such as buffer overflows, stealth port scans,

CGI attacks, SMB probes, OS fingerprinting attempts, and much more.

Snort has a real-time alerting capabilty, with alerts being sent to syslog,

a separate "alert" file, or as a WinPopup message via Samba's smbclient

Edit /etc/snort.conf to configure snort and use snort.d to start snort

This rpm is different from previous rpms and while it will not clobber

your current snortd file, you will need to modify it.

There are 9 different packages available

All of them require the base snort rpm. Additionally, you will need

to chose a binary to install.

/usr/sbin/snort should end up being a symlink to a binary in one of

the following configurations:

plain plain+flexresp

mysql mysql+flexresp

postgresql postgresql+flexresp

snmp snmp+flexresp

bloat mysql+postgresql+flexresp+snmp

Please see the documentation in /usr/share/doc/snort-2.8.5.1

There are no rules in this package the license they are released under forbids

us from repackaging them and redistributing them.

Update to 2.8.5.1 which includes a fix for CVE-2009-3641 DoS (crash) while printing specially-crafted IPv6 packet using the -v option