Differences

This shows you the differences between two versions of the page.

--- сервис_snort [2020/03/10 12:50]
val
+++ сервис_snort [2022/03/09 11:29]
val [Пример атаки с isp.un]
@@ Line 15: / Line 15: @@
 ...
 DEBIAN_SNORT_INTERFACE="eth2"
+#DEBIAN_SNORT_INTERFACE="eth1"
 DEBIAN_SNORT_HOME_NET="192.168.0.0/16"
+#DEBIAN_SNORT_HOME_NET="any"
 ...
 </code><code>
@@ Line 29: / Line 31: @@
 root@server:~# snort -T -S HOME_NET=[192.168.0.0/16] -c /etc/snort/snort.conf
-root@server:~# service snort stop
+root@server:~# service snort restart
-root@server:~# snort -A console -i eth2 -S HOME_NET=[192.168.0.0/16] -c /etc/snort/snort.conf
-root@server:~# service snort start
 </code>
@@ Line 40: / Line 38: @@
 ==== Debian/Ubuntu ====
 <code>
-# tail -f /var/log/auth.log
+# tail -f /var/log/auth.log | grep Red
 </code>
-==== Пример атаки с server.isp.un ====
+==== Пример атаки с isp.un ====
 <code>
-server.isp.un$ wget http://server.corpX.un/root.exe
+isp.un$ wget http://192.168.X.10/root.exe
 </code>
@@ Line 52: / Line 50: @@
   * [[http://oreilly.com/pub/h/1393|Write Your Own Snort Rules ]]
-==== FreBSD/Debian/Ubuntu ====
+==== Debian/Ubuntu ====
 <code>
 # cat rules/local.rules

Методические материалы Лохтурова Вячеслава