OnnoCenterWiki - User contributions [en]

SNORT

2012-01-08T12:26:37Z

Tuanpembual: /* Bacaan */

'''Snort''' adalah [[free software|free]] dan [[open source software|open source]] [[Intrusion-prevention system|network intrusion prevention system]] (NIPS) dan [[Network intrusion detection system|network intrusion detection system (NIDS)]], yang di kembangkan oleh [[Martin Roesch]] tahun 1998. Snort saat ini di kembangkan oleh [[Sourcefire, Inc|Sourcefire]], dimana Roesch adalah founder dan [[chief technical officer|CTO]].
Tahun 2009, Snort terpilih sebagai ‘greatest open source software of all time.’

==Uses==
Snort’s open source network-based intrusion detection system (NIDS) has the ability to perform real-time traffic analysis and packet logging on Internet Protocol (IP) networks. Snort performs protocol analysis, content searching, and content matching. The program can also be used to detect probes or attacks, including, but not limited to, operating system fingerprinting attempts, common gateway interface, buffer overflows, server message block probes, and stealth port scans.

Snort can be configured in three main modes: sniffer, packet logger, and network intrusion detection.

In sniffer mode, the program will read network packets and display them on the console. In packet logger mode, the program will log packets to the disk. In intrusion detection mode, the program will monitor network traffic and analyze it against a ruleset defined by the user. The program will then perform a specific action based on what has been identified.

There are several third party tools interfacing Snort for administration, reporting and log analysis:
*Snorby [http://www.snorby.org/]
*BASE [http://base.secureideas.net]
*RazorBack [http://www.intersectalliance.com/projects/RazorBack/index.html]

== See also ==
* [[Intrusion-detection system|Intrusion Detection System]] (IDS)
* [[Intrusion Prevention System]]
* [[Network intrusion detection system|Network Intrusion Detection]]
* [[Metasploit Project]]
* [[nmap]]
* [[Snort]]
* [[Wireshark]]

==External links==
*[http://www.sourcefire.com/products/3D/ids Intrusion Detection System]
*[http://www.sourcefire.com/ Sourcefire homepage]
*[http://www.snort.org/ Snort homepage]

==Bacaan==

* http://willy.lecturer.maranatha.edu/?p=817

==Pranala Menarik==

* [[Instalasi SNORT dan BASE]]
* [[SNORT: Compile SNORT dan BASE]]
* [[SNORT: Install SNORT]]

[[Category: Keamanan Jaringan]]

Instalasi SNORT dan BASE

2012-01-08T12:26:00Z

Tuanpembual: /* Bacaan */

* [[SNORT: Compile SNORT dan BASE]]
* [[SNORT: Install SNORT]]

==Bacaan==

* http://willy.lecturer.maranatha.edu/?p=817

==Referensi==

* http://125.160.17.21/speedyorari/index.php?dir=snort/rules '''RULES JADOEL untuk Percobaan'''
* http://www.snort.org/snort-downloads
* http://www.snort.org/dl/
* http://www.snort.org/start/rules
* http://base.secureideas.net/

==Pranala Menarik==

* [[Linux Howto]]

[[Category: Linux]]
[[Category: Network Security]]

Mirror Repository Ubuntu 10.04

2011-12-12T08:13:41Z

Tuanpembual: /* Mengkonfigurasi debmirror */

==Asumsi==

folder repo : /home/media/repo-10.4
server : dl2.foss-id.web.id atau 125.160.17.22
GNUPGHOME : /home/media/mirrorkeyring

Ubah informasi tersebut di sesuaikan dengan kondisi komputer anda

==Mengkonfigurasi debmirror==

* Install debmirror

# apt-get install debmirror

* Buatlah folder untuk menempatkan [[repository]], misalnya /home/media/repo-10.4

# mkdir /home/media/repo-10.4

* Buatlah script mirror menggunakan nano agar lebih mudah

# nano /usr/local/bin/mirrorbuild.sh

* Masukan script berikut

#### Start script to automate building of Ubuntu mirror #####
## THE NEXT LINE IS NEEDED THE REST OF THE LINES STARTING WITH A # CAN BE DELETED

#!/bin/bash

## Setting variables with explanations.

#
# Don't touch the user's keyring, have our own instead
#
export GNUPGHOME=/home/media/mirrorkeyring

# Arch= -a # Architecture. For Ubuntu can be i386, powerpc or amd64.
# sparc, only starts in dapper, it is only the later models of sparc.
#
arch=i386

# Minimum Ubuntu system requires main, restricted
# Section= -s # Section (One of the following - main/restricted/universe/multiverse).
# You can add extra file with $Section/debian-installer. ex: main/debian-installer,universe/debian-installer,multiverse/debian-installer,restricted/debian-installer
#
section=main,restricted,universe,multiverse

# Release= -d # Release of the system (Dapper, Edgy, Feisty, Gutsy, Hardy, Intrepid), and the -updates and -security ( -backports can be added if desired)
#
# release=jaunty,jaunty-security,jaunty-updates
# release=karmic
# release=karmic,karmic-security,karmic-updates
# release=karmic,karmic-security,karmic-updates,karmic-backports,karmic-proposed
release=lucid,lucid-security,lucid-updates,lucid-backports,lucid-proposed

# Server= -h # Server name, minus the protocol and the path at the end
# CHANGE "*" to equal the mirror you want to create your mirror from. au. in Australia ca. in Canada.
# This can be found in your own /etc/apt/sources.list file, assuming you have Ubuntu installed.
#
# server=opensource.telkomspeedy.com:5432
# server=dl2.foss-id.web.id
server=125.160.17.22

# Dir= -r # Path from the main server, so http://my.web.server/$dir, Server dependant
#
inPath=ubuntu

# Proto= -e # Protocol to use for transfer (http, ftp, hftp, rsync)
# Choose one - http is most usual the service, and the service must be avaialbe on the server you point at.
#
proto=http

# Outpath= # Directory to store the mirror in
# Make this a full path to where you want to mirror the material.
#
outPath=/home/media/repo-10.4

# The --nosource option only downloads debs and not deb-src's
# The --progress option shows files as they are downloaded
# --source \ in the place of --no-source \ if you want sources also.
# --nocleanup Do not clean up the local mirror after mirroring is complete. Use this option to keep older repository
# Start script
#
debmirror -a $arch \
--no-source \
-s $section \
-h $server \
-d $release \
-r $inPath \
--progress \
-e $proto \
$outPath

#### End script to automate building of Ubuntu mirror ####

Simpan script jika sudah selesai di edit semua-nya.

* Ubah ijin agar file mirrorbuild.sh dapat di jalankan

# chmod -Rf 777 /usr/local/bin/mirrorbuild.sh

* Ubah ijin dari folder mirror

# chown -Rf root.root /home/media/repo-10.4
# chmod -Rf 571 /home/media/repo-10.4

* Buat folder untuk mirror keyring

# mkdir /home/media/mirrorkeyring
# gpg --no-default-keyring --keyring /home/media/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg

* Jalankan mirrorbuild.sh

# mirrorbuild.sh

* Sebelum bisa digunakan dengan baik, kadang kala kita perlu beberapa kali menjalankan perintah

# gpg --no-default-keyring --keyring /home/media/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg
# mirrorbuild.sh

==Pranala Menarik==

* [[Membuat Repository Ubuntu Lokal menggunakan debmirror]]
* [[Linux Howto]]

Mirror Repository Ubuntu 10.04

2011-12-12T08:12:21Z

Tuanpembual: /* Mengkonfigurasi debmirror */

==Asumsi==

folder repo : /home/media/repo-10.4
server : dl2.foss-id.web.id atau 125.160.17.22
GNUPGHOME : /home/media/mirrorkeyring

Ubah informasi tersebut di sesuaikan dengan kondisi komputer anda

==Mengkonfigurasi debmirror==

* Install debmirror

# apt-get install debmirror

* Buatlah folder untuk menempatkan [[repository]], misalnya /home/media/repo-10.4

# mkdir /home/media/repo-10.4

* Buatlah script mirror

# vi /usr/local/bin/mirrorbuild.sh

* Masukan script berikut

#### Start script to automate building of Ubuntu mirror #####
## THE NEXT LINE IS NEEDED THE REST OF THE LINES STARTING WITH A # CAN BE DELETED

#!/bin/bash

## Setting variables with explanations.

#
# Don't touch the user's keyring, have our own instead
#
export GNUPGHOME=/home/media/mirrorkeyring

# Arch= -a # Architecture. For Ubuntu can be i386, powerpc or amd64.
# sparc, only starts in dapper, it is only the later models of sparc.
#
arch=i386

# Minimum Ubuntu system requires main, restricted
# Section= -s # Section (One of the following - main/restricted/universe/multiverse).
# You can add extra file with $Section/debian-installer. ex: main/debian-installer,universe/debian-installer,multiverse/debian-installer,restricted/debian-installer
#
section=main,restricted,universe,multiverse

# Release= -d # Release of the system (Dapper, Edgy, Feisty, Gutsy, Hardy, Intrepid), and the -updates and -security ( -backports can be added if desired)
#
# release=jaunty,jaunty-security,jaunty-updates
# release=karmic
# release=karmic,karmic-security,karmic-updates
# release=karmic,karmic-security,karmic-updates,karmic-backports,karmic-proposed
release=lucid,lucid-security,lucid-updates,lucid-backports,lucid-proposed

# Server= -h # Server name, minus the protocol and the path at the end
# CHANGE "*" to equal the mirror you want to create your mirror from. au. in Australia ca. in Canada.
# This can be found in your own /etc/apt/sources.list file, assuming you have Ubuntu installed.
#
# server=opensource.telkomspeedy.com:5432
# server=dl2.foss-id.web.id
server=125.160.17.22

# Dir= -r # Path from the main server, so http://my.web.server/$dir, Server dependant
#
inPath=ubuntu

# Proto= -e # Protocol to use for transfer (http, ftp, hftp, rsync)
# Choose one - http is most usual the service, and the service must be avaialbe on the server you point at.
#
proto=http

# Outpath= # Directory to store the mirror in
# Make this a full path to where you want to mirror the material.
#
outPath=/home/media/repo-10.4

# The --nosource option only downloads debs and not deb-src's
# The --progress option shows files as they are downloaded
# --source \ in the place of --no-source \ if you want sources also.
# --nocleanup Do not clean up the local mirror after mirroring is complete. Use this option to keep older repository
# Start script
#
debmirror -a $arch \
--no-source \
-s $section \
-h $server \
-d $release \
-r $inPath \
--progress \
-e $proto \
$outPath

#### End script to automate building of Ubuntu mirror ####

Simpan script jika sudah selesai di edit semua-nya.

* Ubah ijin agar file mirrorbuild.sh dapat di jalankan

# chmod -Rf 777 /usr/local/bin/mirrorbuild.sh

* Ubah ijin dari folder mirror

# chown -Rf root.root /home/media/repo-10.4
# chmod -Rf 571 /home/media/repo-10.4

* Buat folder untuk mirror keyring

# mkdir /home/media/mirrorkeyring
# gpg --no-default-keyring --keyring /home/media/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg

* Jalankan mirrorbuild.sh

# mirrorbuild.sh

* Sebelum bisa digunakan dengan baik, kadang kala kita perlu beberapa kali menjalankan perintah

# gpg --no-default-keyring --keyring /home/media/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg
# mirrorbuild.sh

==Pranala Menarik==

* [[Membuat Repository Ubuntu Lokal menggunakan debmirror]]
* [[Linux Howto]]

Mirror Repository Ubuntu 10.04

2011-12-12T08:12:05Z

Tuanpembual: /* Mengkonfigurasi debmirror */

==Asumsi==

folder repo : /home/media/repo-10.4
server : dl2.foss-id.web.id atau 125.160.17.22
GNUPGHOME : /home/media/mirrorkeyring

Ubah informasi tersebut di sesuaikan dengan kondisi komputer anda

==Mengkonfigurasi debmirror==

* Install debmirror

# apt-get install debmirror

* Buatlah folder untuk menempatkan [[repository]], misalnya /home/media/repo-1.40

# mkdir /home/media/repo-10.4

* Buatlah script mirror

# vi /usr/local/bin/mirrorbuild.sh

* Masukan script berikut

#### Start script to automate building of Ubuntu mirror #####
## THE NEXT LINE IS NEEDED THE REST OF THE LINES STARTING WITH A # CAN BE DELETED

#!/bin/bash

## Setting variables with explanations.

#
# Don't touch the user's keyring, have our own instead
#
export GNUPGHOME=/home/media/mirrorkeyring

# Arch= -a # Architecture. For Ubuntu can be i386, powerpc or amd64.
# sparc, only starts in dapper, it is only the later models of sparc.
#
arch=i386

# Minimum Ubuntu system requires main, restricted
# Section= -s # Section (One of the following - main/restricted/universe/multiverse).
# You can add extra file with $Section/debian-installer. ex: main/debian-installer,universe/debian-installer,multiverse/debian-installer,restricted/debian-installer
#
section=main,restricted,universe,multiverse

# Release= -d # Release of the system (Dapper, Edgy, Feisty, Gutsy, Hardy, Intrepid), and the -updates and -security ( -backports can be added if desired)
#
# release=jaunty,jaunty-security,jaunty-updates
# release=karmic
# release=karmic,karmic-security,karmic-updates
# release=karmic,karmic-security,karmic-updates,karmic-backports,karmic-proposed
release=lucid,lucid-security,lucid-updates,lucid-backports,lucid-proposed

# Server= -h # Server name, minus the protocol and the path at the end
# CHANGE "*" to equal the mirror you want to create your mirror from. au. in Australia ca. in Canada.
# This can be found in your own /etc/apt/sources.list file, assuming you have Ubuntu installed.
#
# server=opensource.telkomspeedy.com:5432
# server=dl2.foss-id.web.id
server=125.160.17.22

# Dir= -r # Path from the main server, so http://my.web.server/$dir, Server dependant
#
inPath=ubuntu

# Proto= -e # Protocol to use for transfer (http, ftp, hftp, rsync)
# Choose one - http is most usual the service, and the service must be avaialbe on the server you point at.
#
proto=http

# Outpath= # Directory to store the mirror in
# Make this a full path to where you want to mirror the material.
#
outPath=/home/media/repo-10.4

# The --nosource option only downloads debs and not deb-src's
# The --progress option shows files as they are downloaded
# --source \ in the place of --no-source \ if you want sources also.
# --nocleanup Do not clean up the local mirror after mirroring is complete. Use this option to keep older repository
# Start script
#
debmirror -a $arch \
--no-source \
-s $section \
-h $server \
-d $release \
-r $inPath \
--progress \
-e $proto \
$outPath

#### End script to automate building of Ubuntu mirror ####

Simpan script jika sudah selesai di edit semua-nya.

* Ubah ijin agar file mirrorbuild.sh dapat di jalankan

# chmod -Rf 777 /usr/local/bin/mirrorbuild.sh

* Ubah ijin dari folder mirror

# chown -Rf root.root /home/media/repo-10.4
# chmod -Rf 571 /home/media/repo-10.4

* Buat folder untuk mirror keyring

# mkdir /home/media/mirrorkeyring
# gpg --no-default-keyring --keyring /home/media/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg

* Jalankan mirrorbuild.sh

# mirrorbuild.sh

* Sebelum bisa digunakan dengan baik, kadang kala kita perlu beberapa kali menjalankan perintah

# gpg --no-default-keyring --keyring /home/media/mirrorkeyring/trustedkeys.gpg --import /usr/share/keyrings/ubuntu-archive-keyring.gpg
# mirrorbuild.sh

==Pranala Menarik==

* [[Membuat Repository Ubuntu Lokal menggunakan debmirror]]
* [[Linux Howto]]