3.Click in a checkbox to select the preprocessor desired option:
Option | Description |
Perform IP defragmentation | The IP defragmentation preprocessor uses memory management routines |
| that are used in other parts of Snort. It uses the default memory limit of |
| 4194304 bytes (4 MB) and a timeout period of 60 seconds. The timeout |
| period is used to determine a length of time that a unassembled fragment |
| should be discarded. |
Perform RPC Traffic | Normalizes rpc multiple fragmented records into a single unfragmented |
| record. It does this by normalizing the packet into the packet buffer. if |
| stream4 is enabled, it will only process client side traffic. It defaults to |
| running on ports 111 and 32771I. |
Normalize Telnet Negotiation stings | Allows Snort to normalize Telnet control protocol characters from the |
| session data. It accepts a list of ports to run on as arguments. Also, it |
| normalizes into a separate data buffer from the packet itself so that the |
| raw data may be logged or examined with the raw bytes content. |
4.Click on Submit.
Running Snort
Follow these steps to run Snort:
1.From the Manage Components menu, choose Snort.
2.From the Configure Snort menu, choose Run Snort. The statistics for the operation are displayed.
Viewing Alert Messages
Follow these steps to view Snort alert messages.
1.From the Manage Components menu, choose Snort.
2.From the Configure Snort menu, choose View Alert Messages. All the alert messages are displayed.
Use the standard navigation features to advance page by page, go to a specific page, or search for a particular text string.
FreeRADIUS Server Administration
The FreeRadius User Authentication tool scales from embedded systems with small amounts of memory, to systems with millions of users. It is configurable, and supports more authentication protocols than many commercial servers.
This section describes the following FreeRADIUS Server Administration information:
•Considerations while installing FreeRADIUS (Section : Considerations While Installing FreeRADIUS)
•Starting and Stopping the FreeRADIUS Server (Section : Starting and Stopping the FreeRADIUS Server)
•Understanding Configuration files (Section : Understanding FreeRADIUS Configuration Files)
•Viewing FreeRADIUS log file (Section : Viewing FreeRADIUS Log File)
For information on FreeRADIUS server, see the FreeRADIUS Web site:
http://www.freeradius.org
186 Network Security Administration
