Re: [Snort-inline-users] Snort-inline with ClamAv

[Tareq A. <Tar...@al...>]

Hi Victor

Thanks for the link but I ve already seen it. I guess my question is
what should I do with this configuration. I can't seem to find a
configuration file to use the sample in.

Thanks

Tareq

-----Original Message-----
From: Victor Julien [mailto:vi...@nk...]=20
Sent: Saturday, October 07, 2006 12:10 PM
To: Tareq AlKhatib
Cc: sno...@li...
Subject: Re: [Snort-inline-users] Snort-inline with ClamAv

Tareq AlKhatib wrote:
> Hi all,
>
> I am having problems setting up Snort-inline with ClamAv. I downloaded
> the tar ball from http://www.bleedingsnort.com/ and configured it to
use
> inline and ClamAv (./configure --enable-inline --enable-clamav) and
make
> (made?) and make install. So far everything seems to work without
> errors.
>
> The problem is I can't seem to find any of the usual configuration
> files, not even snort.conf. I know I must change a configuration file
> somewhere but I can't seem to find it. (Do I need to create it?)
>
> Can someone point me in the correct direction?
>  =20

I'm not sure I completely understand what you are looking for. I think=20
you ask for an example config for Snort + ClamAV. Please check this page

for that:=20
http://www.bleedingsnort.com/staticpages/index.php?page=3Dsnort-clamav

If you need the other configuration files, in the Snort source tarball=20
is a directory called etc/ it contains some example files. Rules can be=20
downloaded from snort.org and bleedingsnort.com...

Hope this helps!

Regards,
Victor