What do you see in the packet logs or output from Snort?
您在来自Snort的包日志或输出中看到了哪些内容？
You know that Snort is an intrusion detection system, but how does it detect intrusion?
您知道Snort是一种入侵检测系统，但它是如何检测入侵的呢？
The strangling hero sprang up with a relieving snort.
透不过气来的英雄喷着鼻子跳了起来。
This file is the source code for Snort, which you can use to generate for your particular platform.
此文件是Snort的源代码，您可以通过此源代码生成您特定的平台。
Sid yawned, stretched, then brought himself up on his elbow with a snort, and began to stare at Tom.
希德打了个呵欠，伸了个懒腰，然后用胳膊肘支起身子，哼了一声，开始瞪着汤姆。
Snort: an intrusion detection tool.
Snort：一种入侵检测工具。
Snort: Obviously, this runs snort.
snort：显然，这用来运行snort。
Listing 11: Telling Snort where to log packets.
清单11：告诉Snort在何处记录包。
Listing 4 shows a portion of the Snort configuration file.
清单4展示了Snort配置文件的一部分。
Listing 8 shows all the rules files you got from the Snort site.
清单8展示了从Snort站点获得的所有规则文件。
It tells Snort what to do when it finds that something specific.
告诉Snort在找到特定内容时执行何种操作。
Listing 8 shows the output from running snort -v on a MAC OS X machine.
清单8展示了在MacOSx机器上运行snort- v的输出结果。
For instance, run snort -v to get output that looks a bit like Listing 1.
例如，运行snort- v获得如清单1所示的输出。
Snort expects to find some rule files, but when it doesn't, it errors out.
Snort期望发现一些规则文件，但是没有找到，因此出现错误。
Bob says, which makes her snort and drop the cigarette between her feet.
鲍勃说，这话让她哼了一声，香烟掉落到脚边。
Oddly, Snort doesn't give you a very helpful "I'm finished" screen right away.
奇怪的是，Snort并未提供非常有用的“安装完成”屏幕。
There are four options: Snort itself, dynamic modules, documentation, and schemas.
这里有四个选项：Snort本身、动态模块、文档和模式。
Really, it's good use of Snort rules that saves you the work of manual packet analysis.
实际上，使用Snort规则可以省去手工分析包的工作。
Seriously. The logo for Snort is a ping pig with a large nose, presumably snorting.
（严格来说，Snort的徽标就是一头大鼻子粉红色小猪，似乎在喷鼻息）。
Listing 12 shows a simple rule you can add to your Snort setup to take care of relaying.
清单12展示了一个示例规则，可以将它添加到Snort设置中处理邮件转发。
There are several steps you need to perform to get Snort running properly on Mac OS X.
需要执行一些步骤才能在MacOSx上正确地运行Snort。
This means that often, even if you can run Snort, you can't use it to do anything productive.
这也就是说，即便您可以运行Snort，通常也无法使用它来做任何有生产意义的事情。
Additionally, you'll need to configure Snort and tell it what to do when it senses an attack.
此外，您需要配置Snort，告诉它在感知到攻击时应采取怎样的措施。
You'll get a folder like snort-2.8.0.2, and the contents should look something like Listing 3.
您将获得一个类似于snort - 2.8.0.2的文件夹，内容应如清单3所示。
This file is the source for Snort, and you can build from this source for your particular platform.
此文件是Snort的源代码，您可以通过此源代码为您的特定平台进行生成。
Note: This article is not really focused on Snort from the system administrator's point of view.
注意：本文并非从系统管理员的角度考虑Snort。
Unfortunately, Snort wants to write to lots of restricted directories, as well as to run in them.
遗憾的是，Snort需要写入大量受限的目录，并且要在其中运行。
Unless you've got a standard installation directory for programs like Snort, stick with the default here.
除非您能够为Snort 这样的程序选择标准安装目录，否则应使用默认设置。
Run the installer, confirm to Windows that you trust the application, and accept the Snort license agreement.
运行安装程序，在Windows提示时确认您信任该应用程序，接受Snort许可协议。
Run the installer, confirm to Windows that you trust the application, and accept the Snort license agreement.
运行安装程序，在Windows提示时确认您信任该应用程序，接受Snort许可协议。
应用推荐