Posted
by nitins
on Server Fault
See other posts from Server Fault
or by nitins
Published on 2010-05-25T11:40:21Z
Indexed on
2010/05/25
11:51 UTC
Read the original article
Hit count: 335
We need to setup an intrusion detection system (IDS) on our linux proxy server. Please suggest intrusion detection systems ? anything else than Snort ?
© Server Fault or respective owner
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
I've got a problem with apt-get update and apt-get install ... commands .
every time update or installing fails and errors are :
Get:1 http://dl.google.com stable Release.gpg [198B]
Ign http://dl.google.com/linux/chrome/deb/ stable/main Translation-en_US
Get:2 http://dl…
>>> More
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
sh@ubuntu:/home/ccpp/helloworld$ make
gcc-4.6 -O2 -DMODULE -D_KERNEL_ -W -Wall -Wstrict-prototypes -Wmissing-prototypes -isystem /lib/modules/`uname -r`/build/include -c -o hello-1.o hello-1.c
hello-1.c:4:0: warning: "MODULE" redefined [enabled by default]
<command-line>:0:0: note: this is…
>>> More
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
I am having trouble accessing the several critical header files that show to be a part of the build process.
The "Ubuntu Software Center" shows "Build Essentials" as installed:
Next I did the following two commands, which did not improve the problem:
~$ sudo apt-get install build-essential
[sudo]…
>>> More
as seen on Super User
- Search for 'Super User'
I'm trying to update my Debian machine to 2.6.32-46 (which is the new stable). However, after doing apt-get update my apt-cache search linux-image shows me:
linux-headers-2.6.32-5-486 - Header files for Linux 2.6.32-5-486
linux-headers-2.6.32-5-686-bigmem - Header files for Linux 2.6.32-5-686-bigmem
linux-headers-2…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I'm helping out with a project for an embedded device that only has USB and no serial. This device is running Linux.
These days, when we need to connect to a serial port on a device we typically use a USB to serial adapter (on something like a phone system or a load balancing device, etc). I would…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
My site seems to be the target of quite a bit of probing over the last few months. In an attempt to get a better handle on this I installed SNORT on one of the machines that has external exposure. Something must not be installed correctly as I see lots of probing in /var/log/messages but snort isn't…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I need some help with my Snort/Barnyard2 setup. My goal is to have Snort send unified2 logs to Barnyard2 and then have Barnyard2 send the data to other locations. Here is my currrent setup.
OS
Scientific Linux 6
Snort Version
2.9.2.3
Barnyard2 Version
2.1.9
Snort command
snort -c /etc/snort/snort…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I'm trying to identify trouble users on our network. ntop identifies high traffic and high connection users, but malware doesn't always need high bandwidth to really mess things up. So I am trying to do offline analysis with snort (don't want to burden the router with inline analysis of 20 Mbps…
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
Hi.
I’m working on DARPA 1998 intrusion detection dataset.
When I run snort on this dataset (outside.tcpdump file), snort don’t generate complete list of alerts. It means snort start from last few hours of tcpdump file and generate alerts about this section of file and all of packets in first hours…
>>> More
as seen on Super User
- Search for 'Super User'
I'm trying to learn network intrusion detection. When I try to launch Snort, in IDS mode, I get this message (I'm running Mac OS X):
Initializing Network Interface en1
ERROR: OpenPcap() FSM compilation failed:
syntax error
PCAP command: snort
Fatal Error, Quitting..
How can I fix this problem…
>>> More
