Snort Install Linux

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen

Install

  • apt-get install snort

Snort-linux-1.png

Test

  • snort -T -i eth0 -c /etc/snort/snort.conf

Local Rules

  • cat /etc/snort/rules/local.rules
Alert icmp any any -> any any (msg:"Snort Test"; sid:1000000001;)
#Alert udp any any -> any any (msg:"Snort Test UDP"; sid:1000000002;)
#Alert tcp any any -> any any (msg:"Snort Test TCP"; sid:1000000003;)
Abgerufen von „http://wiki.ixheim.de/index.php?title=Snort_Install_Linux&oldid=10112“