Home page logo

snort logo Snort mailing list archives

Re: Linux recommendations
From: Jason Haar <Jason.Haar () trimble co nz>
Date: Wed, 10 Nov 2010 09:35:43 +1300

On 11/10/2010 05:16 AM, Castle, Shane wrote:
autoconf/libtool issue mean that I can't use RHEL5 at all. So, unless I
want to hold out for RHEL6, I have to start looking for a Linux platform
It's worse than that - RHE6 doesn't have libpcap-1 either.

The hardware I'm using is a 4-core Intel Xeon 3.20GHz, 8GB, and a RAID 0
disk arrangement. I've been eying Fedora 14, but it is really geared
more toward the desktop world than the server world.
We're going through the same issue. Even though I love Fedora and run it
on my own workstation, I wouldn't use it as a platform for snort, and I
expect you're like me and want a platform that will need no major manual
work (ie yum will work) for some period of YEARS. As Fedora is
deliberately arranged with a 1-year lifecycle, it's too short to be a
stable platform IMHO

Myself, we're currently leaning towards migrating from our CentOS4 (yup,
not even CentOS5 - we've had a good few years use out of this platform)
environment to CentOS6 when it comes out - and we'll use
vincent () cojot name's good work on libpcap1 to get us past any libpcap
dependency issues. I certainly can't see any logic in using RHE itself
(ie commercial Linux) in this role - snort and surrounding apps are way
to "developmenty" to waste money on a commercial platform, who will
refuse to give you support when you need it because you've
fiddled/replaced standard components.

BTW, I've currently got snort-2.9.0 working fine under CentOS4 using the
same src.rpm's


Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]