http://www.gamelinux.org OSS and Security @ WORK Thu, 05 Aug 2010 09:58:31 +0000 http://backend.userland.com/rss092 en Back from vacation :) I did pack 2.8.6.0, but it never made it to the public before I went on vacations :/ You can find 2.8.6.1 here: http://debs.gamelinux.org/snort/hardy/ -*> Snort! <*- Version 2.8.6.1 IPv6 GRE (Build 39) http://www.gamelinux.org/?p=92 As Kacper stated here, PRADS 0.2.0 has been released! You can download some debian packages here, or you can check out the GIT repo here. Bug reports, issues, thoughts or any comments are very welcome! Enjoy! http://www.gamelinux.org/?p=91 I haven't seen any HOWTOs yet on how to use the feature of dividing up your network into multiple snort configuration files (Virtual Networks?). I have tried this on my sensors and it works great. Before, one would solve the problem by firing up multiple instances of snort, each with their ... http://www.gamelinux.org/?p=90 Small PADS info: I bumped the version of pads to 1.2.1 (My version) after applying a patch that fixes many issues as follow: PADS did not enable warnings during compilation. Enabling that revealed that it did not actually include header files declaring the functions it used. Fixing this revealed a multitude of little bugs ... http://www.gamelinux.org/?p=89 I just had to comment on this... Read the advisory here. My short comment; If you install any type of Software, or use any kind of mechanical devices, or do anything in life, be sure too know what you are doing. If you buy a car, and the car door is not locked ... http://www.gamelinux.org/?p=88 As Ubuntu 10.04 (Lucid Lynx) is the next LTS (Long Time Support) version of Ubuntu that is coming out soon (April 29, 2010), I have started to look at how sguil and my dot deb packages will work. I installed Lucid Lynx yesterday and installed my server and sensor debs on ... http://www.gamelinux.org/?p=87 It has been a long journey, but after about two years, I finally got a way to populate Snorts host attribute table, automagically(tm)! When I started this, my first option was to use nmap to scan the network to populate the information. This was scratched, as my goal was to be ... http://www.gamelinux.org/?p=86 Saturday 18 Jun 2005 Matthew J. Shelton released PADS. PADS is a great tool, and the security industry really needs a good open source passive asset tool. But since 2005, PADS development has stopped, and there are no place to send new signature or patches/bugs too, and hope that they ... http://www.gamelinux.org/?p=83 Loglevel: INFO I have packed snort 2.8.5.3 for Ubuntu Hardy and Jaunty: http://debs.gamelinux.org/snort/hardy/ http://debs.gamelinux.org/snort/jaunty/ -*> Snort! <*- Version 2.8.5.3 IPv6 (Build 124) http://www.gamelinux.org/?p=82 These are general pointers too things you want to dig into when you need to optimize Snort. If you are one of those who believe that Snort can't go beyond 100Mbit/s and still not drop packets, you should read on. Comments/feedback/new tips/corrections on how to tune a Snort system is ... http://www.gamelinux.org/?p=81