Summary

This chapter presented some of the alternative methods of installing Snort. Three popular methods of installing Snort that are different from the distributed Linux setup were detailed. There are unique tools available for the different setups.

Snort can be installed as a hybrid server/sensor. In this situation, all the Snort components are collapsed onto a single machine. Some benefits of a distributed Snort deployment must be given up to create a hybrid server/sensor. Scalability, performance, and security are compromised when using the hybrid installation.

OpenBSD is one of many choices for a Unix-based operating system for Snort. OpenBSD has a reputation for adhering to the highest standards of security for any OS. This makes OpenBSD ...

Get Intrusion Detection with Snort now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.