IDS(Intrusion Detection System)であるSnortのｲﾝｽﾄｰﾙを行うことにした｡
それにしても
snortって名前はやっぱり豚がｸﾝｸﾝとﾄﾘﾌを探し当てるように､ﾈｯﾄﾜｰｸ上の怪しい何かを嗅ぎ分けるようなので付けられた名前なのでしょうか?
このｾｷｭﾘﾃｨ対策も食べ物で決まったようなので食べ物対策ｼﾘｰｽﾞ第3弾のはじまりです｡(ちょっと強引ですが)
赤いｳｸﾚﾚより
ﾊﾟｯｹｰｼﾞの確認
gentooez8 ~ # emerge -pv snort
These are the packages that I would merge, in order:
Calculating dependencies ...done!
[ebuild N ] dev-libs/libpcre-6.3 -doc 552 kB
[ebuild N ] net-analyzer/snort-2.4.3-r1 -flexresp -inline +mysql +odbc +postgres -prelude (-selinux) -sguil -snortsam +ssl 3,457 kB
Total size of downloads: 4,010 kB
事前にlibpcreが必要みたいですね｡これは正規表現がPerlと仲良くするﾗｲﾌﾞﾗﾘでしょうか?
ｲﾝｽﾄｰﾙ
gentooez8 ~ # emerge snort
省略
* To use a database as a backend for snort you will have to
* import the correct tables to the database.
* You will have to setup a database called snort first.
*
* MySQL: zcat /usr/share/doc/snort-2.4.3-r1/schemas/create_mysql.gz | mysql -p snort
* PostgreSQL: import /usr/share/doc/snort-2.4.3-r1/schemas/create_postgresql.gz
* SQL tables need to be created - look at /usr/share/doc/snort-2.4.3-r1/schemas/
*
* Also, read the following Gentoo forums article:
* http://forums.gentoo.org/viewtopic-t-399801.html
*
* Only a basic set of rules was installed.
* Please add your other sets of rules to /etc/snort/rules.
* For more information on rules, visit http://www.snort.org/.
省略
MySQLでﾃﾞｰﾀﾍﾞｰｽ作れって書いてけどまずは!
動作確認
--== Initialization Complete ==--
,,_ -*> Snort!
