Hi Wenji,<br><br>Please check out the following links.<br><br>1.<br><a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki">https://redmine.openinfosecfoundation.org/projects/suricata/wiki</a><br><br>2.<br>
<a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Suricata_User_Guide">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Suricata_User_Guide</a><br><br>3.<br><a href="https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Suricatayaml">https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Suricatayaml</a><br>
(3 is what you are really asking I think)<br><br><br><br>Let us know if you need more help.<br><br>Thanks<br><br><br><div class="gmail_quote">On Fri, Nov 11, 2011 at 4:37 PM, Wenji Wu <span dir="ltr"><<a href="mailto:wuwenji18@gmail.com">wuwenji18@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Folks,<br><br>I am new here, Could anybody help me out on Suricata configuration?<br><br>Suricata's website posts links to public data sets. Where can I find the related configuration files such as: classification.config  reference.config  suricata.yaml ?<br>

<br>I mean how can I set up the following parameters in suricata.yaml:<br><br>    HOME_NET:<br><br>    EXTERNAL_NET:<br><br>    HTTP_SERVERS: "$HOME_NET"<br><br>    SMTP_SERVERS: "$HOME_NET"<br><br>    SQL_SERVERS: "$HOME_NET"<br>

<br>    DNS_SERVERS: "$HOME_NET"<br><br>    TELNET_SERVERS: "$HOME_NET"<br><br>    AIM_SERVERS: any<br><br><br>thanks,<br><font color="#888888"><br>wenji<br>
</font><br>_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Peter Manev<br>
<div style="visibility: hidden; left: -5000px;" id="avg_ls_inline_popup"></div>