security/snortsam 2.70_1 DragonFly

Output plugin for Snort

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
Categories: security
Package size: 94.6 KiB, 330.1 KiB installed

Description

SnortSam is an intelligent agent that allows the popular open-source Intrusion Detection System called Snort to block intruding connections by reconfiguration of many firewalls and Cisco devices.

Install

Binary package:

pkg install snortsam

From DPorts:

cd /usr/dports/security/snortsam && make install clean

Dependencies

No port depends on this one.

Configuration

No options to configure.

Service scripts: none

Message after installing

SNORT have to be build with OPTION SNORTSAM.

	To enable snortsam as output plugin for snort a config
	line like the following should be present in snort.conf

	  output alert_fwsam: <snortsambox>:<port>/<password>

	With samtool it is possible to send alerts to snortsam,
	this way you can test and adjust your FW rules.

        For more information read the INSTALL, FAQ, README
        files in /usr/local/share/doc/snortsam

        Additional consolidate http://snortsam.net