入侵检测实验报告.docxVIP

w w 入侵检测实验报告 一实验环境搭建 1 安装 winpcap 按向导提示完成即可 （有时会提示重启计算机。）使网卡处于混杂模式, 能够抓取数据包。 2安装snort 采用默认安装完成即可 安装完成使用下列命令行验证是否成功 C:\S nortbi nsn ort.exe -W (也可以看到所有网卡的 In terface列表) 我的文裆我的宅脑冋上鄒居回收站Ini arnat Expl orarfC ?- ^nort Xbin!sn flirt ? cxcInterfaceDevice-|5? XSi c \rmovDescript un2,B15^023U@4 口J谕字节C:\SnortMfelii 的目录-* Sngitt 我的文裆 我的宅脑 冋上鄒居 回收站 Ini arnat Expl orar fC ?- ^nort Xbin!sn flirt ? cxc Interface Device -|5? X Si c \rmov Descript un 2,B15^023U@4 口J谕字节 C:\SnortMfelii 的目录 -* Sngitt 尸 叽科iem 2-6-1.1 -OD0C-HySQL-FlexKESP UIN32 B4ild 3B Ely Mart in Roesch The Snort Tcani： http ： Z/www . sma+t ■OGgi^tcsiimi. hitnl C Cop^i^isfht iy?8-2U?ti iF? Inc., et a■丄亠 2007 -12-01 13：0S D1R aH0r?-12-Kl 12：U? D1R B .. 2HB5-1B-BE H2：4B 73^728 LibnetNT.dll 51003-12-93 23：22 94.208 pcre.dll 200 -11 23 1,589,248 ^nort -CX.C 1,757,184 I \De4J1 lee \NPF_GBnericDlupAdaptei* (Generic dialup adapter * sBcviccsHPF ft015172E-8E34~4fi3F-B58-5DD30E7fi?E47 (VMware Accelerated AND PCH fiidaptcr)* C ： ^SnortMjini 看到那个狂奔的小猪了吗？看到了，就表示 snort安装成功 3安装和设置mysql 设置数据库实例流程: ■ySQL Server 工hleIance CoiiLfi gnrti on li zard MySQL Server Instance Configuration Configure the MySQL Server 5*Q server instance, Please select m configuration type. Q OeUiled Conflguratiivn： Choose this configuration type to create the optimal server wet申 for th 祐 machi n^. 「Standard Configuration L 、* Use this only on machines that do not already have a MySQL server \ $ installation. This 啊ill use a general purpose conFiguration for Ehe server that 匚an be tuned manually. Back Next Caned XDeveloper M^chi neThis is a development machine, and many other appli匚aticinw 时 X Developer M^chi ne This is a development machine, and many other appli匚aticinw 时ill be run on it. MySQL Server should only u^e a minimal amount oF memory. 仃 Server Machine^ Several server applications be running on this machine.匚hoose this option for webyapplkatiori servers. MySQL will hiave medium memory u 汨转 i~ bedkdtEd My^QL Server Machine This machine K dedicated