(源自網絡)SNORT+ACID(入侵檢測系統)的安裝

詳細內容

分類: 網絡安全

發佈: 2006-06-15, 週四 22:05

作者 Super User

點擊數: 17390

Install Snort:
rpm -ivh snort-2.1.3-0.fdr.1.i386.rpm
rpm -ivh snort-mysql-2.1.3-0.fdr.1.i386.rpm

mysqladmin create snort -u root -p

mysql -D snort -u root -p < ./create_mysql

zcat snortdb-extra.gz | mysql -p snort

mysql -u root -p

grant INSERT,SELECT on snort.* to snort@localhost;

SET PASSWORD FOR snort@localhost=PASSWORD('jason');

grant INSERT,SELECT,UPDATE on snort.sensor to snort@localhost;

vi /etc/snort/snort.conf
output database: log, mysql, user=snort password=jason dbname=snort host=localhost

vi /etc/sysconfig/snort
ALERTMODE=fast
change to:
#ALERTMODE=fast

/etc/init.d/snortd restart