Step Task
3Configure the following parameters in the file sguil.conf:
•Enable (1) or disable (0) the debug option
•Set the browser path.
•Set the Wireshark application path.
•Set the TLS library path, as shown in Figure 28.
•Set priority levels of the alert window.
Figure 28 Setting the TLS Library Path
#PATH to tls lib if needed (tcl can usually find this by default) #set TLS_PATH /usr/lib/tls1.4/libtls1.4.so
#win32 example
set TLS_PATH "c:/progra~1/Tcl/lib/tls1.4.1/tls14.dll"
Installation Files
Table 7 lists the files and directories created during installation that are relevant to running the Sguil system.
Table 7 Sguil Files and Directories
File | Location |
|
|
Sensor |
|
|
|
sensor installation directory | |
|
|
sensor configuration files | <install_dir>/nsm/sguil/etc |
|
|
snort.conf | <install_dir>/nsm/sguil/etc/ |
|
|
log files | <install_dir>/nsm/sguil/logs |
|
|
rules files | <install_dir>/nsm/sguil/rules |
|
|
Snort logs | /var/log/Snort |
|
|
Packet logs | /var/log/Sensor/LogPackets |
|
|
Server |
|
|
|
server installation directory | |
|
|
sguild.conf | <install_dir>/nsm/sguil/etc |
|
|
log files | <install_dir>/nsm/sguil/logs |
|
|
46 | Network Security Monitoring |
