Re: [Snort-inline-users] Snort-inline with ClamAv

[Victor J. <vi...@nk...>]

Tareq AlKhatib wrote:
> Hi all,
>
> I am having problems setting up Snort-inline with ClamAv. I downloaded
> the tar ball from http://www.bleedingsnort.com/ and configured it to use
> inline and ClamAv (./configure --enable-inline --enable-clamav) and make
> (made?) and make install. So far everything seems to work without
> errors.
>
> The problem is I can't seem to find any of the usual configuration
> files, not even snort.conf. I know I must change a configuration file
> somewhere but I can't seem to find it. (Do I need to create it?)
>
> Can someone point me in the correct direction?
>   

I'm not sure I completely understand what you are looking for. I think 
you ask for an example config for Snort + ClamAV. Please check this page 
for that: 
http://www.bleedingsnort.com/staticpages/index.php?page=snort-clamav

If you need the other configuration files, in the Snort source tarball 
is a directory called etc/ it contains some example files. Rules can be 
downloaded from snort.org and bleedingsnort.com...

Hope this helps!

Regards,
Victor