Learning about Snort

I found some very informative articles about Snort.

• Linux Journal http://www.linuxjournal.com/article/4668
• SWiK http://swik.net/snort

Figure 1: Snort Architecture by Nalneesh Gaur of Linux Journal

The Linux Journal will provide you with information about the architecture, Snort rules, the principles upon which Snort is based, some examples of what the back end or output will be, and also great diagrams like the one above to help grasp the concept.

From Snort's home site snort.org I found that 4 programs are required before installing Snort:

• Libpcap
• PCRE
• Libnet
• Barnyard

As well there were programs to help and assit Snort like Oinkmaster.
http://www.snort.org/downloads/additional-downloads/#oinkmaster

You can download you Snort Rules at snort.org as well.
http://www.snort.org/start/rules

For information on Snort, read Docs from Snort like Snort Manual.
http://www.snort.org/start/documentation