Suricata: Instalasi di Ubuntu 18.04 - Revision history

Onnowpurbo: /* Pranala Menarik */

2020-03-30T03:41:27Z

Pranala Menarik

← Older revision		Revision as of 03:41, 30 March 2020
Line 27:		Line 27:

	* [[Suricata]]		* [[Suricata]]
			* [[Suricata (software)]]
			* [[Suricata: Instalasi di Ubuntu]]
			* [[Suricata: Instalasi di Ubuntu 18.04]]
			* [[Suricata: Konfigurasi Minimal Ubuntu 18.04]]
			* [[Suricata: Test DDoS Attack]]
			* [[Suricata: Konfigurasi Dasar]]
			* [[Suricata: Manajemen Rule dengan Oinkmaster]]
			* [[Suricata: Instalasi Snorby & barnyard2]]

Onnowpurbo at 02:02, 30 March 2020

2020-03-30T02:02:02Z

← Older revision		Revision as of 02:02, 30 March 2020
Line 8:		Line 8:
	Instalasi normal,		Instalasi normal,

	sudo apt install suricata		sudo apt -y install suricata

	Instalasi dengan fasilitas debugging di enabled,		Instalasi dengan fasilitas debugging di enabled,

	sudo apt install suricata-dbg		sudo apt -y install suricata-dbg

	Selesai sudah,		Selesai sudah,

Onnowpurbo at 01:57, 30 March 2020

2020-03-30T01:57:37Z

← Older revision		Revision as of 01:57, 30 March 2020
Line 1:		Line 1:
	Sumber: https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/		Sumber: https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/

			Cara yang paling sederhana untuk instalasi Suricata adalah menggunakan repository. Untuk versi terakhir, sebaiknya menggunakan repostory PPA, sebagai berikut,
	~~Installing~~ Suricata ~~from PPA~~ repository

	~~Even though Suricata is available on the default Ubuntu 18~~.~~04 repositories~~, ~~it may not be up-to-date. As a result~~, ~~to ensure that you got the latest version installed~~, ~~you need to add the following PPA repository.~~

	sudo add-apt-repository ppa:oisf/suricata-stable		sudo add-apt-repository ppa:oisf/suricata-stable
	sudo apt update		sudo apt update

	~~Once the PPA repo is set~~, ~~install Suricata with the package manager.~~		Instalasi normal,

	~~apt-cache policy suricata~~
	~~suricata:~~
	~~Installed: 4.1.2-0ubuntu6~~
	~~Candidate: 4.1.2-0ubuntu6~~
	~~Version table:~~
	*** 4.1.2-0ubuntu6 500
	~~500 http://ppa.launchpad.net/oisf/suricata-stable/ubuntu bionic/main amd64 Packages~~
	~~100 /var/lib/dpkg/status~~
	~~3.2-2ubuntu3 500~~
	~~500 http://ke.archive.ubuntu.com/ubuntu bionic/universe amd64 Packages~~

	sudo apt install suricata		sudo apt install suricata

	~~You can instead install Suricata with~~ debugging enabled.		Instalasi dengan fasilitas debugging di enabled,

	sudo apt install suricata-dbg		sudo apt install suricata-dbg

	~~That is all with installation. At the end of installation~~, ~~you will have~~ Suricata rules ~~under~~ /etc/suricata/rules/ ~~and the main configuration file under~~ /etc/suricata/suricata.yaml.		Selesai sudah,
			* Suricata rules berada di /etc/suricata/rules/
	~~To list the Suricata rules;~~		* File konfigurasi di /etc/suricata/suricata.yaml.

	~~ls -C /etc/suricata/rules/~~
	~~app-layer-events.rules emerging-attack_response.rules emerging-malware.rules emerging-telnet.rules LICENSE~~
	~~botcc.portgrouped.rules emerging-chat.rules emerging-misc.rules emerging-tftp.rules modbus-events.rules~~
	~~botcc.rules emerging-current_events.rules emerging-mobile_malware.rules emerging-trojan.rules nfs-events.rules~~
	~~BSD-License.txt emerging-deleted.rules emerging-netbios.rules emerging-user_agents.rules ntp-events.rules~~
	~~ciarmy.rules emerging-dns.rules emerging-p2p.rules emerging-voip.rules sid-msg.map~~
	~~classification.config emerging-dos.rules emerging-policy.rules emerging-web_client.rules smb-events.rules~~
	~~compromised-ips.txt emerging-exploit.rules emerging-pop3.rules emerging-web_server.rules smtp-events.rules~~
	~~compromised.rules emerging-ftp.rules emerging-rpc.rules emerging-web_specific_apps.rules stream-events.rules~~
	~~decoder-events.rules emerging-games.rules emerging-scada.rules emerging-worm.rules suricata-4.0-enhanced-open.txt~~
	~~dnp3-events.rules emerging-icmp_info.rules emerging-scan.rules files.rules tls-events.rules~~
	~~dns-events.rules emerging-icmp.rules emerging-shellcode.rules gpl-2.0.txt tor.rules~~
	~~drop.rules emerging-imap.rules emerging-smtp.rules http-events.rules~~
	~~dshield.rules emerging-inappropriate.rules emerging-snmp.rules ipsec-events.rules~~
	~~emerging-activex.rules emerging-info.rules emerging-sql.rules kerberos-events.rules~~


			Sebaiknya di baca2 isi file2 di /etc/suricata/rules/

	==Referensi==		==Referensi==

Onnowpurbo at 01:52, 30 March 2020

2020-03-30T01:52:36Z

← Older revision	Revision as of 01:52, 30 March 2020
Line 2:	Line 2:


		Installing Suricata from PPA repository

		Even though Suricata is available on the default Ubuntu 18.04 repositories, it may not be up-to-date. As a result, to ensure that you got the latest version installed, you need to add the following PPA repository.

		sudo add-apt-repository ppa:oisf/suricata-stable
		sudo apt update

		Once the PPA repo is set, install Suricata with the package manager.

		apt-cache policy suricata
		suricata:
		Installed: 4.1.2-0ubuntu6
		Candidate: 4.1.2-0ubuntu6
		Version table:
		*** 4.1.2-0ubuntu6 500
		500 http://ppa.launchpad.net/oisf/suricata-stable/ubuntu bionic/main amd64 Packages
		100 /var/lib/dpkg/status
		3.2-2ubuntu3 500
		500 http://ke.archive.ubuntu.com/ubuntu bionic/universe amd64 Packages

		sudo apt install suricata

		You can instead install Suricata with debugging enabled.

		sudo apt install suricata-dbg

		That is all with installation. At the end of installation, you will have Suricata rules under /etc/suricata/rules/ and the main configuration file under /etc/suricata/suricata.yaml.

		To list the Suricata rules;

		ls -C /etc/suricata/rules/
		app-layer-events.rules emerging-attack_response.rules emerging-malware.rules emerging-telnet.rules LICENSE
		botcc.portgrouped.rules emerging-chat.rules emerging-misc.rules emerging-tftp.rules modbus-events.rules
		botcc.rules emerging-current_events.rules emerging-mobile_malware.rules emerging-trojan.rules nfs-events.rules
		BSD-License.txt emerging-deleted.rules emerging-netbios.rules emerging-user_agents.rules ntp-events.rules
		ciarmy.rules emerging-dns.rules emerging-p2p.rules emerging-voip.rules sid-msg.map
		classification.config emerging-dos.rules emerging-policy.rules emerging-web_client.rules smb-events.rules
		compromised-ips.txt emerging-exploit.rules emerging-pop3.rules emerging-web_server.rules smtp-events.rules
		compromised.rules emerging-ftp.rules emerging-rpc.rules emerging-web_specific_apps.rules stream-events.rules
		decoder-events.rules emerging-games.rules emerging-scada.rules emerging-worm.rules suricata-4.0-enhanced-open.txt
		dnp3-events.rules emerging-icmp_info.rules emerging-scan.rules files.rules tls-events.rules
		dns-events.rules emerging-icmp.rules emerging-shellcode.rules gpl-2.0.txt tor.rules
		drop.rules emerging-imap.rules emerging-smtp.rules http-events.rules
		dshield.rules emerging-inappropriate.rules emerging-snmp.rules ipsec-events.rules
		emerging-activex.rules emerging-info.rules emerging-sql.rules kerberos-events.rules

Onnowpurbo: Created page with "Sumber: https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/ ==Referensi== * https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/ ==Pranala..."

2020-03-30T01:45:51Z

Created page with "Sumber: https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/ ==Referensi== * https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/ ==Pranala..."

New page

Sumber: https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/

==Referensi==

* https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/

==Pranala Menarik==

* [[Suricata]]