Snort setup problem.

[jcisco]

I just installed Snort on my windows 2k server device. and i'm having a problem finding the alerts.ids I have searched the C dirve and it's not there, but it looks like one should be do i need to extract it or something? or do i just need to create a blank txt file and change the ext type to .ids?.
And I also have a question with Mysql. When I first launched mySQL it asked for a user name and password. i just made one up now is that user/password the main account for mySQL? or do i need to make another one.. I ask because i wasn't sure if that user name and password is the user/password that i need to enter in the snort.config file.

cheers.


--------------

 

[Xemus]

Snort should create the .ids file by default, tho you may need to have an entry in that file (something that actually triggers an alert) to get it to create it.

http://www.closedsocket.com