Topic: How to use snort and acid (ari Novikoff)

[chris burnat]

I have been trying to obtain information about acid, how to set it up and use it.  Cannot find anything in the forum, except a reference to a HOWTO by Ari Novikoff.  Unfortunately, it cannot be found on the server...  Can someone point me in the right direction?  Many thanks.
chris.

[briank]

Ari's site seems to be down but his files are here http://mirror.contribs.org/smeserver/contribs/cbharda/contrib/snort/
and I have posted a copy of the original Howto here
http://homepages.ihug.co.nz/~brian/AcidSnortHowto.htm
Can you let us know if you get this working on SME6.
Good Luck
Brian

[chris burnat]

Many thanks Brian.  I am trying to figure out why snort dies every once in a while, and so I am trying to figure out how it works. This howto has provided some insights into it all.

There was a posting about this problem a while back [Posted: 12 May 2004 04:04    Post subject: snort dead but subsys locked], but no clear resolution. And so will post in this topic to keep the tread going.

Note that the information about acid in the howto grom Ari Novikoff does not match the current version as far as I can tell.  I have located some ocumentation about acid at http://www.cert.org/kb/acid/ - still working on it...

cheers

christian