Snort

Intrusion detection with Snort Under Linux

Category:

Science & Technology

Tags:

• snort
• linux
• hacking
• packet
• sniffing
• intrusion
• detection

[nieseldiesel]

want to make the config public?

[boriddlin]

Many apologies but this video was made many years ago and am currently not running Linux with Snort. The config file is lost to the digital dust of time.

If I get the chance this week, I might download snort and the release the re-configured snort ID files. It was a matter of eliminating each error when it appeared and trawling through the config files commenting out the corrupt lines.

Perhaps things have improved since July 2008?

[skyshock21]

Thumbs up for 1:27

[andrew8833]

@cdenver If you use pfSense it has all the configs in a tidy menu system.

Its a version of freeBSD configed as a router, so its like having either a virtual host or a physical node like I have facing your connection.

All my traffic dos attacks have gone down to virtually nothing, you still get those pesky kids trying to gain access but my passwords on both a non super user and super user are pretty much secure.

It's a great system but just need heck loads of memory to run allot of rules lol.

[MCSpidah]

it sounds like your SNORTing something

[nieseldiesel]

ok thats fine!

[pablete777]

1.27 is my favourite

[cdenver]

Snort is a headache to configure, but once configured its great.

You should look into using B.A.S.E. along with Snort, also an operating system called CentOS which has all the libraries for it.

I think to quit snort you press 'q' or 'Esc', even stop the job by pressing 'ctrl+z' then typing 'jobs -x exit'.

You could have had a tripod or something for that camera man ;-) Nice to see you got snort running, most people dont know how.