Re: [Sguil-users] Snort alerts aren't showing up in Sguil client

[Richard B. <tao...@gm...>]

On 1/27/07, OlRoy OlRoy <olr...@ya...> wrote:
> I'm using OpenBSD 4.0, Sguil 0.6.1, and Snort 2.6.1.2
>
> As far as I can tell the individual components are working, however Snort
> alerts that Snort is recognizing aren't showing up in my Sguil client
> window.  I don't have any errors to give so I'm kind of stumped as to what
> the problem could  be.  Any suggestions on things I could try?
>
> I'm also very new to *nix and Snort so it could be a minor mistake I've made
> somewhere when following the OBSD Sguil install tutorial on Sguils website.
>
>

Hello,

If you're new to Snort and Unix I suggest becoming familiar with Snort
by following these two articles:

http://searchsecuritychannel.techtarget.com/tip/1,289483,sid97_gci1233608,00.html

http://searchsecuritychannel.techtarget.com/tip/0,289483,sid97_gci1239878,00.html

My third one will appear soon.

It's important to know how Snort is working, alone, before trying to
get an elaborate construction like Sguil operating.

Sincerely,

Richard