Snort-Setup for Statistics HOWTO

PoppiSandro

        spoppi at gmx.de
        

¼­Á¤·æ

s_ryong at hotmail.com

¼ÛÀç¼÷

affinity at orgio.net

ÀÌ HOWTO ´Â Åë°è µµ±¸ÀÎ ACID (Analysis Consol for Intrusion Databases) ¿Í SnortSnarf ¿Í ÇÔ²² »ç¿ëµÇ´Â Snort ¹öÀü 1.8.3 ÀÇ ¼³Á¤ ¹æ¹ýÀ» ±â¼úÇÑ´Ù. ¶ÇÇÑ snort ¿¡¼­ ¹ö·ÁÁö´Â ÆÐŶÀÌ ÀÖ´ÂÁö¿Í °°ÀÌ ´Ù¼ÒÀÇ ³»ºÎ Åë°è ÀڷḦ ¾ò´Â ¹æ¹ýÀÌ ¼³¸íµÇ¾î ÀÖ´Ù.

Ãß°¡ÀûÀ¸·Î Max Vision ÀÇ ±ÔÄ¢À» ÀÚµ¿ÀûÀ¸·Î °»½ÅÇÏ´Â ¹æ¹ýÀÌ ±â¼úµÇ¾î ÀÖÀ¸¸ç À¯¿ëÇÑ ¾à°£ÀÇ ½ºÅ©¸³Æ®¿Í swatch µ¥¸ð ¼³Á¤ÀÌ Æ÷ÇԵǾî ÀÖ´Ù.

°íÄ£ °úÁ¤
°íħ 1.02002-01-01°íÄ£ÀÌ sp
- ÃÖÃÊ ¹ßÇ¥ ¹öÀü - Snort ¹öÀü 1.8.3 À» »ç¿ëÇÏ¿´´Ù - www.snort.org ¿¡ ÀÖ´Â RPM À» »ç¿ëÇÏ¿´´Ù - ÀúÀÚÀÇ snortd initscript ¿¡ ´ëÇÑ ¸µÅ©¸¦ Ãß°¡ÇÏ¿´´Ù - ÀÚµ¿ ±ÔÄ¢ °»½Å¿¡ ´ëÇÑ °æ°í¸¦ Ãß°¡ÇÏ¿´´Ù - IDSPM ¿¡ ´ëÇÑ ÈùÆ®¸¦ Ãß°¡ÇÏ¿´´Ù - snort.org ÀÇ RPM À» ¹Ý¿µÇϱâ À§ÇØ /etc/snort ¿¡ ´ëÇÑ ±ÔÄ¢ ÆÄÀÏÀ» º¯°æÇÏ¿´´Ù - as allways: ¸î¸î ºÎºÐÀ» ¸íÈ®È÷ ¼³¸íÇÏ¿´´Ù
°íħ 0.052001-11-14°íÄ£ÀÌ sp
- ¹®¼­À̸§À» Snort-Setup for Statistics HOWTO ·Î º¯°æÇÏ¿´´Ù - Greg Sarsons ¿¡ °í¹«µÇ¾î ªÀº Åë°è ½ºÅ©¸³Æ®¸¦ Ãß°¡ÇÏ¿´´Ù - ¸î¸î ºÎºÐÀ» ¸íÈ®È÷ ¼³¸íÇÏ¿´°í ¾à°£ÀÇ ¿ÀŸ¸¦ ¼öÁ¤ÇÏ¿´´Ù
°íħ 0.042001-09-29°íÄ£ÀÌ sp
- Greg Sarsons À¸·ÎºÎÅÍ Á¦¾ÈµÈ "snort ³»ºÎ Åë°èÀÚ·á" ÀýÀ» Ãß°¡ÇÏ¿´´Ù - Greg Sarsons ÀÌ Á¦°øÇÑ ÂªÀº Åë°è ½ºÅ©¸³Æ®¸¦ Ãß°¡ÇÏ¿´Áö¸¸ ´õ¿í ÀϹÝÀûÀÎ ¹öÀüÀ» À§ÇØ ÁÖ¼®Ã³¸®ÇÏ¿´´Ù
°íħ 0.032001-09-19°íÄ£ÀÌ sp
- swatch.conf ¿¡ throttle ¿É¼ÇÀ» Ãß°¡ÇÏ¿´´Ù - ACID ¹öÀüÀ» 0.9.6b15 ·Î º¯°æÇÏ¿´´Ù - ACID Àý¿¡ ¾à°£ÀÇ ÁÖ¼®À» Ãß°¡ÇÏ¿´´Ù - MD5 üũ¼¶À» Ãß°¡ÇÏ¿´Áö¸¸ ÁÖ¼®Ã³¸®ÇÏ¿´´Ù
°íħ 0.022001-09-16°íÄ£ÀÌ sp
Greg Sarsons À¸·ÎºÎÅÍ Á¦¾ÈµÈ ¾à°£ÀÇ ¼³¸í
°íħ 0.012001-09-04°íÄ£ÀÌ sp
ÃÖÃÊ ¹öÀü

Â÷·Ê
1. ¼Ò°³
1.1. ÀúÀÛ±Ç Á¤º¸
1.2. ºÎÀÎ
1.3. ½Å±Ô ¹öÀü
1.4. °¨»ç
1.5. Çǵå¹é
2. ¹®¼­ ±¸Á¶
3. ±â¼úÀûÀÎ °³¿ä
4. ¼³Á¤
4.1. Snort ¼³Á¤Çϱâ
4.1.1. /etc/snort/snort.conf
4.1.1.1. Snort º¯¼ö
4.1.1.2. Snort Àü󸮱â
4.1.1.3. Snort Ãâ·Â ¸ðµâ
4.1.1.4. Snort ±ÔÄ¢ ÁýÇÕ
4.1.2. /etc/rc.d/init.d/snortd
4.1.3. /etc/snort/snort-check
4.1.3.1. /etc/snort/hosts
4.1.3.2. /etc/snort/recipients
4.1.4. Snort ³»ºÎ Åë°èÀÚ·á
4.1.5. Snort Å×½ºÆ®Çϱâ
4.2. MySQL ¼³Á¤Çϱâ
4.3. ADODB ¼³Á¤Çϱâ
4.4. PHPlot ¼³Á¤Çϱâ
4.5. ACID ¼³Á¤Çϱâ
4.6. SnortSnarf ¼³Á¤Çϱâ
4.7. Arachnids_upd ¼³Á¤Çϱâ
4.8. Swatch ¼³Á¤Çϱâ
5. º¸¾È ¹®Á¦
6. µµ¿ò¾ò±â
7. Áú¹®°ú ´äº¯