入侵检测部分实习报告.docVIP

Snort+acid的安装和应用： #cd /software/snort #ls #tar –xvzf libpcap-0.9.4.tar.gz #cd libpcap-0.9.4 #./configure #make #make install #tar –xvzf pcre-7.2.tar.gz #cd pre-7.2 #./configure #make #make install #tar –xvzf snort-2.4.4.tar.gz # cd snort-2.4.4 #ls #./configure –with-mysql=/usr/local/mysql #make #make install #cd /etc #mkdir snort #cd snort # ls #pwd #tar –xvzf /software/snort/snortrules-snapshot-2.4.tar.gz #ls #cd /software/snort/snort-2.4.4 #ls # cd schemas #ls #cd .. #ls #cd etc #ls #cp *.conf /etc/snort/. #cp *.config /etc/snort/. #cp *.map /etc/snort/. #cp generators /etc/snort/. #snort -?(出错：libmysqlclient.so.15) #cd /etc #vim ld.so.conf 添加共享调用：/usr/local/mysql/lib/mysql /usr/local/lib #ldconfig #snort -? (有帮助可执行) #cd /etc #cd snort/ #ls #vim snort.conf 转到目录：(:/RULE_PATH) 修改为：var Rule_path /etc/snort/rules 转到587行处：添加 output database： log， mysql，user=root dbname=snort_log host=localhost output database： alert， mysql，user=root dbname=snort_alert host=localhost 安装数据表：#cd /software/snort/snort-2.4.4 #ls #cd schemas/ #ls # /usr/local/mysql/bin/mysql –u root create_mysql snort_log # /usr/local/mysql/bin/mysql –u root create_mysql snort_alert 安装配置接口： #cd /home #ls #tar –xvzf /software/snort/jpgraph-2.1.1.tar.gz #ls #mv jpgraph-2.1.1 jpgraph #tar –xvzf /software/snort/adodb480.tar.gz #ls 2. #tar –xvzf /software/snort/ac-0.9.6b23.tar.gz #ls #cd acid #vim acid_conf.php 找到12行处：修改为 $DBlib_path = “/home/adob” 转到32行处修改为：$alert_dbname = “snort_alert”, #$alert_password = “mypassword” 转到39行处：$arhcive_dbname = “snort_log” #$archive_password = “mypassword” 搜索：、Chartlib_path 转到69行处：修改为$Charlib_path = “/home/jpgraph/src”, #vim /usr/local/apache2/