Linux

Ask something
Discussion Locked

Using Snortcenter on Red Hat 7.3

0 helpful
5 replies

by niel harper

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Red Hat 7.3 box configured to be my Snort sensor. The following software is being run on this machine:

Bastille Linux
IPTables
FreeS/WAN
Nessus

I just installed the Snortcenter agent on this machine, but it refuses to accept any connections from the Snortcenter server or even locally using port 2525. I have changed the ports numerous times and still no joy. I have even switched off the firewall and still no results. Can anyone tell me what the problem is?

5 replies

by myrolaos

This is strictly a guess but you might want to check the /etc/services file and see if port 2525 is remmed (#) out or is not even there, you can add it manually. Also check you firewall configurations manually in the /etc/sysconfig/ directory and see if the firewall config file is truely allowing all traffic in and out of the system

by claudewatson

I suspect that the previous answer is correct and port 2525 is either not set up in /etc/services or is set up for something else. As a note, though, I fought with this set of software for a couple of weeks and then went to Snort/MySQL/ACID using the writeup on the snort.org web site. It went together very easily and works great with multiple sensors on our various networks.

This discussion is closed to new replies.