SAM - Snort Alert Monitor¶
Requirements
- Ruby on Rails >= 2.1
- Ruby MySQL Gem or Postgres Gem
- Snort logging to a MySQL or Postgres database
Installing Rails
Here's a quick guide to installing SAM.
- Install Ruby on Rails. This can be done using an all-in-one installer like BitNami's RubyStack ( http://bitnami.org/stack/rubystack )
- Make sure you have Ruby on Rails 2.1 installed.
- Download SAM and unzip or untar it.
- Edit the config/database.yml file to reflect your database information. If you are running this in production then edit the section under production and if you running this locally edit the development section.
- Load the database by running 'RAILS_ENV=production rake db:migrate' in the root of your Rails app. If you are running in development mode leave off the RAILS_ENV=production.
- Install any necessary gems by running 'RAILS_ENV=production rake db:migrate'. This is a requirement for 0.6.0 and newer.
- Once you have the database information configured then run the Rails application by running the following command: ./script/server
- You should now be able to hit the app in your browser by typing http://localhost:3000/ or substitute localhost with the IP address of the server.
Default username/password
- admin/changeme! - Make sure you change this immediately.
Upgrading to 0.6.0¶
If you've already got a working installation roll out the new version being sure to keep your existing database.yml file. Once the new version is in place run 'RAILS_ENV=production rake db:migrate'. Restart the app server and you're good to go.