Snorby E Book

Table of Contents

Pre-Install Considerations

The What and Why of Snorby
Snort vs Suricata vs Sagan
Pre-Installation Design (e.g.: Sizing Deployments)
Picking a Database (Mysql vs Postgres)

Installing Snorby

Installation
Enabling Full Packet Capture (OpenFPC) (in progress)

Installing an IDS

Installing a Database Server
Installing Barnyard2
Installing Snort
Installing Suricata (in progress)
Installing Sagan

Configuring After Install

Adding/Removing Users
Changing Passwords
Email Settings
Deploying with Apache (in progress)
Deploying with Nginx (in progress)
Adding Sensors
Snort Rule Updates (in progress)
Rule Lookups
Increasing Snorby Performance (in progress)

Updating

Updating Snorby

Additional Material

Migrating from BASE (in progress)

Troubleshooting

Alerts Not Showing
Snorby Worker
Manually Run Reports
Database Commands
Community Support (Contact Us)

Sys Admin/Developer Info

Database Schema