SNORT: Install SNORT untuk BARNYARD2 - Revision history

Onnowpurbo: /* Instalasi BASE */

2016-02-21T04:43:28Z

Instalasi BASE

← Older revision		Revision as of 04:43, 21 February 2016
Line 311:		Line 311:
	$BASE_urlpath = ‘/base';		$BASE_urlpath = ‘/base';

	$DBlib_path = ‘/~~var~~/~~www~~/~~html~~/~~adodb5′~~;		$DBlib_path = ‘/usr/share/php/adodb/′;

	$alert_dbname = ‘snortdb';		$alert_dbname = ‘snortdb';

2016-02-21T04:40:07Z

← Older revision		Revision as of 04:40, 21 February 2016
Line 29:		Line 29:
	apt-get update -y		apt-get update -y
	apt-get -y install apache2 libapache2-mod-php5 mysql-server mysql-common mysql-client php5-mysql libmysqlclient-dev \		apt-get -y install apache2 libapache2-mod-php5 mysql-server mysql-common mysql-client php5-mysql libmysqlclient-dev \
	php5-gd php-pear libphp-adodb php5-cli		php5-gd php-pear libphp-adodb php5-cli php5-adodb


	Jika masih belajar dapat menggunakan		Jika masih belajar dapat menggunakan

2016-02-21T04:34:21Z

Test Snort

← Older revision		Revision as of 04:34, 21 February 2016
Line 190:		Line 190:
	..		..
	..		..
			Preprocessor Object: SF_DNP3 Version 1.1 <Build 1>
			Preprocessor Object: SF_DNS Version 1.1 <Build 4>
			Preprocessor Object: SF_SDF Version 1.1 <Build 1>
	Preprocessor Object: SF_DCERPC2 Version 1.0 <Build 3>		Preprocessor Object: SF_DCERPC2 Version 1.0 <Build 3>
	Preprocessor Object: ~~SF_GTP~~ Version 1.1 <Build 1>		Preprocessor Object: SF_SSH Version 1.1 <Build 3>
	Preprocessor Object: ~~SF_MODBUS~~ Version 1.1 <Build 1>		Preprocessor Object: SF_FTPTELNET Version 1.2 <Build 13>
	Preprocessor Object: SF_POP Version 1.0 <Build 1>		Preprocessor Object: SF_POP Version 1.0 <Build 1>
	Preprocessor Object: ~~SF_SSH~~ Version 1.1 <Build 3>		Preprocessor Object: SF_SMTP Version 1.1 <Build 9>
	Commencing packet processing (pid=~~26253~~)		Commencing packet processing (pid=6082)

	Harus keluar kata-kata		Harus keluar kata-kata

2016-02-21T04:30:49Z

Ubah konfigurasi snort untuk Barnyard2

← Older revision		Revision as of 04:30, 21 February 2016
Line 178:		Line 178:


	cp /usr/local/snort/snort-2.9.7.6/etc/gen-msg.map /usr/local/snort/etc/		cp /usr/local/snort/snort-2.9.8.0/etc/gen-msg.map /usr/local/snort/etc/

	==Test Snort==		==Test Snort==

2016-02-21T04:26:13Z

Download Latest Snort Rules

← Older revision		Revision as of 04:26, 21 February 2016
Line 96:		Line 96:
	Kita perlu membuat login di snort.org		Kita perlu membuat login di snort.org
	Kemudian Sign-In untuk download rules.		Kemudian Sign-In untuk download rules.
	Setelah rules berhasil di download, lakukan:		Setelah rules berhasil di download, copy ke ke /usr/local/src.

			Kemudian lakukan:

	cd /usr/local/src		cd /usr/local/src
	tar ~~zxf~~ snortrules-snapshot-~~2973~~.tar.gz -C /usr/local/snort		tar zxvf community-rules.tar.gz -C /usr/local/snort
			tar zxvf snortrules-snapshot-2962.tar.gz -C /usr/local/snort
			tar zxvf snortrules-snapshot-2976.tar.gz -C /usr/local/snort
			tar zxvf snortrules-snapshot-2980.tar.gz -C /usr/local/snort
	mkdir -p /usr/local/snort/lib/snort_dynamicrules		mkdir -p /usr/local/snort/lib/snort_dynamicrules
	cp /usr/local/snort/so_rules/precompiled/Ubuntu-12-04/x86-64/2.9.7.6/* /usr/local/snort/lib/snort_dynamicrules/		cp /usr/local/snort/so_rules/precompiled/Ubuntu-12-04/x86-64/2.9.8.0/* /usr/local/snort/lib/snort_dynamicrules/
	touch /usr/local/snort/rules/white_list.rules		touch /usr/local/snort/rules/white_list.rules
	touch /usr/local/snort/rules/black_list.rules		touch /usr/local/snort/rules/black_list.rules
Line 120:		Line 125:

	output unified2: filename snort.u2, limit 128		output unified2: filename snort.u2, limit 128


	==Download & Install Barnyard2==		==Download & Install Barnyard2==

2016-02-21T04:10:43Z

Install Deps

← Older revision		Revision as of 04:10, 21 February 2016
Line 79:		Line 79:

	cd /usr/local/snort		cd /usr/local/snort
	wget https://www.snort.org/downloads/snort/snort-2.9.7.6.tar.gz		wget https://www.snort.org/downloads/snort/snort-2.9.8.0.tar.gz
	tar -xzvf snort-2.9.7.6.tar.gz		tar -xzvf snort-2.9.8.0.tar.gz
	cd snort-2.9.7.6		cd snort-2.9.8.0
	./configure -prefix=/usr/local/snort -enable-sourcefire		./configure -prefix=/usr/local/snort -enable-sourcefire
	make		make

2016-02-21T04:04:36Z

← Older revision		Revision as of 04:04, 21 February 2016
Line 1:		Line 1:
	Asumsi:		Asumsi:

	* IP address 192.168.0.~~100~~		* IP address 192.168.0.80
	* nama server : refserver		* nama server : refserver

Line 14:		Line 14:
	auto eth0		auto eth0
	iface eth0 inet static		iface eth0 inet static
	address 192.168.0.~~100~~		address 192.168.0.80
	netmask 255.255.255.0		netmask 255.255.255.0
	network 192.168.0.0		network 192.168.0.0
	broadcast 192.168.0.255		broadcast 192.168.0.255
	gateway 192.168.0.~~223~~		gateway 192.168.0.222
	# dns-* options are implemented by the resolvconf package, if installed		# dns-* options are implemented by the resolvconf package, if installed
	dns-nameservers 8.8.8.8		dns-nameservers 8.8.8.8

2015-11-30T10:41:42Z

Ubah konfigurasi snort untuk Barnyard2

← Older revision		Revision as of 10:41, 30 November 2015
Line 174:		Line 174:


	cp /usr/local/snort/snort-2.9.7.3/etc/gen-msg.map /usr/local/snort/etc/		cp /usr/local/snort/snort-2.9.7.6/etc/gen-msg.map /usr/local/snort/etc/


	==Test Snort==		==Test Snort==

2015-11-30T10:28:08Z

← Older revision		Revision as of 10:28, 30 November 2015
Line 69:		Line 69:

	cd /usr/local/snort		cd /usr/local/snort
	wget https://www.snort.org/downloads/snort/daq-2.0.5.tar.gz		wget https://www.snort.org/downloads/snort/daq-2.0.6.tar.gz
	tar zxvf daq-2.0.5.tar.gz		tar zxvf daq-2.0.6.tar.gz
	cd daq-2.0.5		cd daq-2.0.6
	./configure		./configure
	make		make
Line 79:		Line 79:

	cd /usr/local/snort		cd /usr/local/snort
	wget https://www.snort.org/downloads/snort/snort-2.9.7.3.tar.gz		wget https://www.snort.org/downloads/snort/snort-2.9.7.6.tar.gz
	tar -xzvf snort-2.9.7.3.tar.gz		tar -xzvf snort-2.9.7.6.tar.gz
	cd snort-2.9.7.3		cd snort-2.9.7.6
	./configure -prefix=/usr/local/snort -enable-sourcefire		./configure -prefix=/usr/local/snort -enable-sourcefire
	make		make
Line 101:		Line 101:
	tar zxf snortrules-snapshot-2973.tar.gz -C /usr/local/snort		tar zxf snortrules-snapshot-2973.tar.gz -C /usr/local/snort
	mkdir -p /usr/local/snort/lib/snort_dynamicrules		mkdir -p /usr/local/snort/lib/snort_dynamicrules
	cp /usr/local/snort/so_rules/precompiled/Ubuntu-12-04/x86-64/2.9.7.3/* /usr/local/snort/lib/snort_dynamicrules/		cp /usr/local/snort/so_rules/precompiled/Ubuntu-12-04/x86-64/2.9.7.6/* /usr/local/snort/lib/snort_dynamicrules/
	touch /usr/local/snort/rules/white_list.rules		touch /usr/local/snort/rules/white_list.rules
	touch /usr/local/snort/rules/black_list.rules		touch /usr/local/snort/rules/black_list.rules

2015-06-02T06:42:30Z