Snort Forums Archive

Archive Home » General Chat » Snort Certifications?

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort Certifications?

Posted by lazzy8 on January 05, 2006 18:46:48

Has anyone here recieved any of the snort certifications? I'm interested in attempting one of them but I'd like to know more information about what will be on the tests. I'm pretty familliar w/ snort and have been using it for 6 years. Any suggestions on which test I should take. Are there study guides out there anywhere?

Thanks in advance!

Posted by EktiGroup on January 26, 2006 18:58:37

I am also interested knowing about SNORT certificate

Posted by gunner on January 30, 2006 11:09:30

The SnortCP exam will include the following topics:
networking, general security, basis OS system, evasion and evasion countermeasures, operating Snort, pre-processors, snort config, barnyard, rule troubleshooting and debugging and rules overview. Let me know if you have any other questions. Thanks

Posted by lazzy8 on January 30, 2006 16:26:49

I've been using Snort for like 5 years. I've written custom rules. I've implemented snort-inline. I've used oinkmaster and ACID/BASE. I've been a Linux admin for 7 years. Do you think that I can just take one of the tests?
Are there any study guides or some sample test questions?

Posted by lazzy8 on February 04, 2006 13:02:19

Thanks for the response! Some sample questions would be great just so I can judge if I'm ready or not. My company will pay for the test, but only if I pass so I want to make sure I will pass :)

Posted by emendez on February 06, 2006 09:07:50

At this time, we don't have any materials beyond what's been discussed above. However, it sounds like you aren't exactly new at this, so I think you should be OK. If you go to the sourcefire site and read through the course descriptions for Buiding & Operating Snort and the Snort Rules class, that will give you an idea of what is covered in the classes and thus help you focus your studies.

Posted by sfjennifer on June 05, 2006 07:43:47

With your experience writing rules and using various tools like Oinkmaster and BASE, you can probably just go ahead and successfully take the certification test. We don't currently have any study guides but the online training provides a great resource for the various topics that are covered

We offer Building/Operating a Snort IPS and Snort Rules training. Course descriptions are available at http://www.snort.org/training/.

The Snort manual and installation guides are good resources, as is the Snort 2.1 book although slightly outdated. I would also review the technical FAQs.

I will talk to our education department about providing some sample questions as well.

Hope this helps!