SNORT: Install SNORT

Install menggunakan perintah

sudo apt-get install libpcre3 libpcre3-dev libpcrecpp0 libpcap0.8 libpcap0.8-dev \
mysql-server libmysqlclient15-dev libphp-adodb libgd2-xpm libgd2-xpm-dev php5-mysql \
php5-gd php-pear apache2 php5 php5-xmlrpc php5-mysql php5-gd php5-cli php5-curl \
mysql-client libdumbnet1 libdumbnet-dev

pear install Numbers_Roman-1.0.2
pear install Numbers_Words-0.16.2
pear install Image_Canvas-0.3.2
pear install Image_Graph-0.7.2
pear install --alldeps mail

Konfigurasi database

mysql -u root -p123456

create database snort;
grant ALL on root.* to snort@localhost;
grant ALL on snort.* to snort@localhost IDENTIFIED BY 'snort' ;
grant ALL on snort.* to snort IDENTIFIED BY 'snort' ;
exit

Instal SNORT

apt-get install snort-mysql snort-rules-default acidbase

Masukan

Address range for the local network:  192.168.0.0/16
mysql password : snort

Konfigurasi database

cd /usr/share/doc/snort-mysql/                                            
zcat create_mysql.gz | mysql -u  -h  -p    

Jika sedang belajar

cd /usr/share/doc/snort-mysql/                                            
zcat create_mysql.gz | mysql -u root -h localhost -p123456 snort

Konfigurasi SNORT

vi /etc/snort/database.conf

output database: alert, mysql, user=snort password=snort dbname=snort host=localhost
output database: log, mysql, user=snort password=snort dbname=snort host=localhost

vi /etc/snort/snort.conf

# dibagian output database masukan
include database.conf

Buang db-pending-config

rm /etc/snort/db-pending-config

jika di perlukan

dpkg-reconfigure -plow snort-mysql

Konfigurasi BASE

vi /etc/acidbase/database.php

$alert_user='snort';
$alert_password='snort';
$basepath='/acidbase';
$alert_dbname='snort';
$alert_host='localhost';


$alert_port=;
$DBtype='mysql';