Pseries Installation Guide

46 Network Security Monitoring
Installation Files
Table 7 lists the files and directories created during installation that are relevant to running the Sguil
system.
3 Configure the following parameters in the file sguil.conf:
• Enable (1) or disable (0) the debug option
• Set the browser path.
• Set the Wireshark application path.
• Set the TLS library path, as shown in Figure 28.
• Set priority levels of the alert window.
Figure 28 Setting the TLS Library Path
Table 7 Sguil Files and Directories
File Location
Sensor
sensor installation directory /usr/local/pnic-mgmt-lib/sguil-sensor
sensor configuration files <install_dir>/nsm/sguil/etc
snort.conf <install_dir>/nsm/sguil/etc/
log files <install_dir>/nsm/sguil/logs
rules files <install_dir>/nsm/sguil/rules
Snort logs /var/log/Snort
Packet logs /var/log/Sensor/LogPackets
Server
server installation directory /usr/local/sguil-server
sguild.conf <install_dir>/nsm/sguil/etc
log files <install_dir>/nsm/sguil/logs
Step Task
# PATH to tls lib if needed (tcl can usually find this by default)
#set TLS_PATH /usr/lib/tls1.4/libtls1.4.so
# win32 example
set TLS_PATH "c:/progra~1/Tcl/lib/tls1.4.1/tls14.dll"