SAM - Snort Alert Monitor

Requirements
  • Ruby on Rails >= 2.1
  • Ruby MySQL Gem or Postgres Gem
  • Snort logging to a MySQL or Postgres database

Installing Rails
Here's a quick guide to installing SAM.
  1. Install Ruby on Rails. This can be done using an all-in-one installer like BitNami's RubyStack ( http://bitnami.org/stack/rubystack )
  2. Make sure you have Ruby on Rails 2.1 installed.
  3. Download SAM and unzip or untar it.
  4. Edit the config/database.yml file to reflect your database information. If you are running this in production then edit the section under production and if you running this locally edit the development section.
  5. Load the database by running 'RAILS_ENV=production rake db:migrate' in the root of your Rails app. If you are running in development mode leave off the RAILS_ENV=production.
  6. Install any necessary gems by running 'RAILS_ENV=production rake db:migrate'. This is a requirement for 0.6.0 and newer.
  7. Once you have the database information configured then run the Rails application by running the following command: ./script/server
  8. You should now be able to hit the app in your browser by typing http://localhost:3000/ or substitute localhost with the IP address of the server.

Default username/password
  • admin/changeme! - Make sure you change this immediately.

Upgrading to 0.6.0

If you've already got a working installation roll out the new version being sure to keep your existing database.yml file. Once the new version is in place run 'RAILS_ENV=production rake db:migrate'. Restart the app server and you're good to go.

Screenshots

Dashboard screenshot

FAQ

API Examples

sam.gif - Dashboard screenshot (61.7 kB) Sam Freiberg, 12/{{count}}/2009 09:11 pm