User Tools

Site Tools


freebsd:snort_base

This is an old revision of the document!


Snort + Barnyard2 + Base on FreeBSD 10

Install Software

pkg install snort apache22 mysql56-server mod_php5 phpMyAdmin base wget

Barnyard2 needs to be built from port to have mysql support

cd /usr/ports/security/barnyard2
make config (enable mysql)
make install

Update Snort Rules

Obtain a Onkcode

Update Script

  • Be sure to replace the Oinkcode
  • We are using snort 2.9.6.2 so we are downloading snortrules-snapshot-2962.tar.gz
update_snort_rules.sh
#!/bin/sh
 
cd /tmp
wget --no-check-certificate https://www.snort.org/downloads/community/community-rules.tar.gz
tar xzf community-rules.tar.gz -C /usr/local/etc/snort/rules/
rm community-rules.tar.gz
 
wget --no-check-certificate https://www.snort.org/rules/snortrules-snapshot-2962.tar.gz?oinkcode=068c4616106479c8d9a55d11fc5eff4c9fbaaf6d
tar xzf snortrules-snapshot-2962.tar.gz?oinkcode=<Oinkcode from above> -C /usr/local/etc/snort/
rm snortrules-snapshot-2962.tar.gz?oinkcode=<Oinkcode from above>
 
rm /usr/local/etc/snort/etc/snort.conf
rm /usr/local/etc/snort/etc/threshold.conf
cd /usr/local/etc/snort/etc
mv * ../
rm -r /usr/local/etc/snort/etc
freebsd/snort_base.1407525667.txt.gz · Last modified: 2014/08/08 14:21 by tschulz