Difference between revisions of "Snort"

From Ilianko
Line 14: Line 14:
 
  cd barnyard
 
  cd barnyard
  
  apt-get install libmysqlclient-dev mysql-client
+
  apt-get install libmysqlclient-dev
 
  ./configure --with-mysql --with-mysql-libraries=/usr/lib/x86_64-linux-gnu/ --with-mysql-includes=/usr/include/
 
  ./configure --with-mysql --with-mysql-libraries=/usr/lib/x86_64-linux-gnu/ --with-mysql-includes=/usr/include/
 
  make
 
  make
 
  make install
 
  make install
 +
 +
cp /root/barnyard-0.2.0/etc/barnyard.conf /etc/snort/

Revision as of 08:48, 17 July 2013

1. Кво е снорт?!

  • NIDS

2.


Barnyard

Output spool reader for Snort! This program decouples output overhead from the Snort network intrusion detection system and allows Snort to run at full speed. It takes input and output plugins and can therefore be used to convert almost any spooled fil

wget http://sourceforge.net/projects/barnyard/files/latest/download
tar -xf download
cd barnyard
apt-get install libmysqlclient-dev
./configure --with-mysql --with-mysql-libraries=/usr/lib/x86_64-linux-gnu/ --with-mysql-includes=/usr/include/
make
make install
cp /root/barnyard-0.2.0/etc/barnyard.conf /etc/snort/