Chapter 13. Upgrading and Maintaining Snort

Any book claiming to be a complete guide to a complicated software package should have a chapter on upgrading that software. At some point, you will have to make significant changes to Snort to keep it relevant. You will have to update the ruleset, make changes to configuration options, and eventually upgrade the Snort application itself. These topics are covered in this chapter.

There are several different strategies for upgrading Snort rules and changing configuration settings. The first, and most simple, is to physically sit at the console of the computer that has Snort installed on it. You can make your changes with a text editor, save them, and then restart Snort. Another option is to use SSH ...

Get Intrusion Detection with Snort now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.