Linux: Snort

From RHS Wiki
Jump to navigation Jump to search

Snort

Intrusion detection system
https://www.youtube.com/watch?v=cQeeko9J_Yw

Instalation

  1. .- sudo apt-get install snort
  2. .- sudo dpkg-reconfigure snort
  3. .- sudo apt-get install mysql-server
  4. .- mysql -u root -localhost -p adminPassword
  5. .- create user 'snort'@'localhost' identified by 'snort';
  6. .- grant all privileges on *.* to 'snort'@'localhost' identified by 'snort';
  7. .- flush privileges;
  8. .- quit
  9. .- sudo apt-get install snort-mysql
  10. .- sudo dpkg-reconfigure -plow snort-mysql
  11. .- cd /usr/share/doc/snort/snort-mysql/
  12. .- zcat create_mysql.gz
  13. .- sudo apt-get install acidbase
  14. .- sudo gedit /etc/acidbase/database.php
  15. .- sudo su
  16. .- snort -v

Auto snort

https://github.com/da667/Autosnort