天天看點
傳回

Snort 安裝指南

<b>snort </b><b>安裝指南</b>

<b>一. 準備</b>

   1．安裝 apache, mysql(我是安裝在 /opt 目錄下的，略)

   2．安裝 php

1). 安裝 zlib

          ./configure --prefix=/opt/zlib-&lt;ver&gt; <b>--shared</b>

<b>      </b>    make &amp;&amp; make install

      2). 安裝 gd

          a. 安裝 libpng

          b. 安裝 jpeg

             ./configure --prefix=/opt/jpeg-&lt;ver&gt; <b>--enable-shared</b>

             make &amp;&amp; make test

            (if 'make' says it can't find ./libtool, then modify LIBTOOL=./libtool to LIBTOOL=/usr/bin/libtool in Makefile)

            mkdir -p /opt/jpeg-&lt;ver&gt;/bin /opt/jpeg-&lt;ver&gt;/man/man1 \

/opt/jpeg-&lt;ver&gt;/include /opt/jpeg-&lt;ver&gt;/lib

            # 我不知道，為什麼會這樣：jpeg 的 make install

            # 不會自動建立上述目錄。

            make install &amp;&amp; make install-lib &amp;&amp; make install-headers

         # export PATH=/opt/libpng-&lt;ver&gt;/bin:$PATH

         # CPPFLAGS=-I/opt/libpng-&lt;ver&gt;/include ./configure

           --prefix=/opt/gd-&lt;ver&gt; \

           --with-png=/opt/libpng-&lt;ver&gt; \

           --with-jpeg=/opt/jpeg-&lt;ver&gt;

      3). 安裝 php

          下載下傳并安裝 MySQL-shared-community ([url]www.mysql.com[/url])

          # cp /usr/lib64/libmysqlclient_r.so* /opt/mysql/lib/mysql/

          # ./configure --prefix=/opt/php-5.2.2 \

            --with-apxs2=/opt/apache2/bin/apxs \

            --with-mysql=/opt/mysql \

            --with-gd=/opt/gd-&lt;ver&gt; \

            --with-jpeg-dir=/opt/jpeg-&lt;ver&gt; \

            --with-png-dir=/opt/libpng-&lt;ver&gt; \

            --with-zlib-dir=/opt/zlib-&lt;ver&gt; \

            --enable-sockets \

            --enable-url-includes \

            --enable-track-vars

         添加下面兩行到 httpd.conf:

         # LoadModule foo foo.so(如果 httpd.conf 已經包含      

         # LoadModule 語句，則不需要該行)

         AddType application/x-httpd-php .php

         # make &amp;&amp; make test &amp;&amp; make install

         # cp php.ini-dist /opt/php-&lt;ver&gt;/lib/php.ini

         修改 php.ini: mysql.sock=/tmp/mysql.sock(根據 MySQL

         的安裝配置設定mysql.sock)

         # echo "&lt;? phpinfo(); ?&gt;" &gt; /opt/apache2/htdocs/test.php

         檢查是否能夠正常浏覽 test.php

      4). 安裝 pcre

5). 安裝 libdnet

6). 安裝 libnet

<b>二．安裝和配置 snort</b>

1. 安裝

# export PATH=/opt/libdnet-&lt;ver&gt;/bin:/opt/\

libnet-&lt;ver&gt;/bin:$PATH

# ./configure --prefix=/opt/snort-2.6.1.4 \

--with-mysql=/opt/mysql \

--with-libpcre-includes=/opt/pcre-&lt;ver&gt;/include \

--with-libpcre-libraries=/opt/pcre-&lt;ver&gt;/lib \

--with-dnet-includes=/opt/libdnet-&lt;ver&gt;/include \

--with-dnet-libraries=/opt/libdnet-&lt;ver&gt;/lib \

--with-libnet-includes=/opt/libnet-&lt;ver&gt;/include/ \

--with-libnet-libraries=/opt/libnet-&lt;ver&gt;/lib \

--enable-gre \

--enable-flexresp2 \

--enable-react \

--enable-dynamicplugin

      建立 snort 使用者及相關目錄

# groupadd snort

# useradd -g snort snort -s /sbin/nologin

# mkdir /etc/snort

# mkdir /etc/snort/rules

# mkdir /var/log/snort

# cd etc/

# cp * /etc/snort

      下載下傳并安裝 rules

# tar -zxvf snortrules-snapshot-CURRENT.tar.gz

# cd rules

# cp * /etc/snort/rules/

  2. 配置

 修改 /etc/snort/snort.conf

var HOME_NET

var EXTERNAL_NET !$HOME_NET

preprocessor stream4_reassemble

preprocessor stream4_reassemble: both,ports 21 23 25

53 80 110 111 139 143 445 513 1433

output database: log, mysql, user=snort password=&lt;the password you gave it&gt; dbname=snort host=localhost

     配置自動啟動

# cd  /etc/init.d

# wget [url]http://internetsecurityguru.com/snortinit/snort[/url]

# chmod 755 snort

# chkconfig snort on.

     配置 MySQL

mysql&gt;create database snort;

mysql&gt;grant insert,select on root.* to snort@localhost;

('pwforsnort');

mysql&gt;grant create,insert,select,delete,update on snort.*

to snort@localhost;

to snort;

mysql -u admin -p &lt; /opt/software/snort/snort-

2.6.1.4/schemas/create_mysql snort

mysql&gt;show databases;

mysql&gt;use snort;

mysql&gt;show tables;

<b>三．安裝 BASE</b>

    1. 安裝 PEAR 軟體包

        修改 php.ini： "include_path=.:/opt/php-&lt;ver&gt;/lib/php"

        從 pear.php.net 下載下傳下面的三個包: Image_Canvas Image_Color

        Image_Graph

        安裝包：# pear install Image*

    2. 安裝 ADODB

        從 sf.net 上下載下傳

        # mv adodb&lt;ver&gt;.tgz /opt/apache2/htdocs/

        # tar -zxvf adodb&lt;ver&gt;.tgz

     3. 安裝 BASE

    # mv base-&lt;ver&gt; /opt/apache2/htdocs/base

        # cp base/base_config.php.dist base/base_config.php

        修改 base_config.php

              $BASE_urlpath = "/base";

              $DBlib_path = "/var/www/adodb/ ";

              $DBtype = "mysql";

              $alert_dbname = "snort";

              $alert_host = "localhost";

              $alert_port = "";

              $alert_user = "snort";

              $alert_password = "password_from_snort_conf";

     4. 初始化 BASE

點選 “setup page” 連結，在 “setup page” 上

點選 “setup BASE AG”

     5. 提示: /etc/snort/snort.conf 檔案中的 /usr/local/lib... 可能會

        引起問題，如果那樣，修改這些

        /usr/local/lib... 為正确的路徑即可

<b>四．安裝 oinkmaster </b>(以自動更新 rules)

    # mkdir –p /opt/oinkmaster-&lt;ver&gt;/etc \

          /opt/oinkmaster-&lt;ver&gt;/bin /etc/snort/backup

# chown -R snort:snort /etc/snort/rules /etc/snort/backup

    # cp oinkmaster-&lt;ver&gt;/oinkmaster.pl /opt/oinkmaster-&lt;ver&gt;/bin/

    # cp oinkmaster-&lt;ver&gt;/contrib/*.pl /opt/oinkmaster-&lt;ver&gt;/bin/

    # cp oinkmaster-&lt;ver&gt;/oinkmaster.conf /opt/oinkmaster-&lt;ver&gt;/etc/

    添加如下行到 oinkmaster.conf:

comm_rules/Community-Rules-CURRENT.tar.gz

       url = [url]http://www.bleedingsnort.com/bleeding.rules.tar.gz[/url]

    # cd /etc

    # /opt/oinkmaster-&lt;ver&gt;/bin/makesidex.pl \

      /etc/snort/rules &gt; autodisable.conf

    建立腳本 oinkdaily 并加入到 crontab

      # cat /opt/oinkmaster/bin/oinkdaily

        #!/bin/bash

        #

        /opt/oinkmaster-&lt;ver&gt;/bin/oinkmaster.pl \

           -C /opt/oinkmaster-&lt;ver&gt;/etc/oinkmaster.conf \

-C /etc/autodisable.conf -o /etc/snort/rules \

-b /etc/snort/backup 2&gt;&amp;1 \

| mail -s "oinkmaster" [email][email protected][/email]

      # crontab -u snort -e

        30 5 * * * /opt/ oinkmaster-&lt;ver&gt;/bin/oinkdaily

        修改 /etc/resolv.conf 和 iptables 以便 crontab 能夠發郵件到 

注:對于很簡單的軟體安裝,./configure &amp; make &amp; make install 就可以搞定

   的，沒有寫出詳細的步驟。

本文轉自zkjian517 51CTO部落格，原文連結:http://blog.51cto.com/zoukejian/56527

關系型資料庫 mysql php 安裝port docker安裝指南 安裝snmp mongo資料關系 安裝lib import
上一篇: JAVA 環境搭建
下一篇: oracle import &amp; export 操作相關腳本

繼續閱讀