Difference between revisions of "Suricata: Instalasi di Ubuntu"

From OnnoWiki
Jump to navigation Jump to search
(New page: Ubuntu Installation Pre-installation requirements Before you can build Suricata for your system, run the following command to ensure that you have everything you need for the installatio...)
 
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
−
Ubuntu Installation
+
Sebelum menginstalasi Suricata, kita perlu menginstalasi aplikasi pendukung
  
−
Pre-installation requirements
+
sudo apt-get -y install libpcre3 libpcre3-dbg libpcre3-dev \
 +
build-essential autoconf automake libtool libpcap-dev libnet1-dev \
 +
libyaml-0-2 libyaml-dev zlib1g zlib1g-dev libcap-ng-dev libcap-ng0 \
 +
make libmagic-dev libjansson-dev libjansson4
  
−
Before you can build Suricata for your system, run the following command to ensure that you have everything you need for the installation.
+
HTP / LibHTP adalah HTTP parser yang mengerti security jaringan. HTP di bundel dalam Suricata dan di instalasi secara automatis.
  
−
sudo apt-get -y install libpcre3 libpcre3-dbg libpcre3-dev \
+
IPS (Instrution Prevention System). Secara default, Suricata akan bekerja sebagai IDS. Jika anda ingin menggunakan Suricata sebagai IDS dan IPS, masukan perintah
−
build-essential autoconf automake libtool libpcap-dev libnet1-dev \
 
−
libyaml-0-2 libyaml-dev zlib1g zlib1g-dev libcap-ng-dev libcap-ng0 \
 
−
make libmagic-dev libjansson-dev libjansson4
 
  
−
Depending on the current status of your system, it may take a while to complete this process.
+
sudo apt-get -y install libnetfilter-queue-dev libnetfilter-queue1 libnfnetlink-dev libnfnetlink0
  
−
HTP
+
==Download==
−
HTP is bundled with Suricata and installed automatically. If you need to install HTP manually for other reasons, instructions can be found at HTP library installation.
 
  
−
IPS
+
Untuk men-download dan membuat Suricata, masukan perintah berikut:
−
By default, Suricata works as an IDS. If you want to use it as a IDS and IPS program, enter:
 
  
−
sudo apt-get -y install libnetfilter-queue-dev libnetfilter-queue1 libnfnetlink-dev libnfnetlink0
+
wget http://www.openinfosecfoundation.org/download/suricata-2.0.8.tar.gz
 +
tar -xvzf suricata-2.0.8.tar.gz
 +
cd suricata-2.0.8
  
−
Suricata
+
==Compile dan Install==
  
−
To download and build Suricata, enter the following:
+
Untuk IPS, masukan perintah
  
−
wget http://www.openinfosecfoundation.org/download/suricata-2.0.8.tar.gz
+
./configure --enable-nfqueue --prefix=/usr --sysconfdir=/etc --localstatedir=/var
−
tar -xvzf suricata-2.0.8.tar.gz
 
−
cd suricata-2.0.8
 
  
−
Compile and install the engine
+
Untuk IDS (default), masukan perintah
  
−
If you plan to build Suricata with IPS capabilities, enter:
+
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
  
−
./configure --enable-nfqueue --prefix=/usr --sysconfdir=/etc --localstatedir=/var
+
Lanjutkan dengan perintah
  
−
instead of
+
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
 +
make
 +
sudo make install
 +
sudo ldconfig
  
−
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
+
==Auto setup==
  
−
Continue with the next commands:
+
Kita dapat menggunakan fitur auto setup Suricata :
  
−
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
+
contoh:
−
make
 
−
sudo make install
 
−
sudo ldconfig
 
  
−
Auto setup
+
./configure && make && make install-conf
 +
make install-conf
  
−
You can also use the available auto setup features of Suricata:
+
akan melakukan "make install" regular dan akan secara automatis meng-create/setup semua directory yang dibutuhkan di file suricata.yaml.
  
−
ex:
+
./configure && make && make install-rules
 +
make install-rules
  
−
    ./configure && make && make install-conf
+
akan melakukan "make install" regular dan akan secara automatis men-download dan men-setup ruleset terbaru dari Suricata.
  
−
make install-conf
+
./configure && make && make install-full
−
would do the regular "make install" and then it would automatically create/setup all the necessary directories and suricata.yaml for you.
+
make install-full
  
−
    ./configure && make && make install-rules
+
akan menjalankan semua yang disebut di atas (install-conf dan install-rules) - dan akan memberikan kita sebuah sistem Suricata yang siap di jalankan.
  
−
make install-rules
 
−
would do the regular "make install" and then it would automatically download and set up the latest ruleset from Emerging Threats available for Suricata
 
  
−
    ./configure && make && make install-full
 
−
 
−
make install-full
 
−
would combine everything mentioned above (install-conf and install-rules) - and will present you with a ready to run (configured and set up) Suricata
 
−
 
−
Please continue with Basic Setup.
 
  
  
 +
==Referensi==
  
 +
* https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Ubuntu_Installation
  
  
−
==Referensi==
+
==Pranala Menarik==
  
−
* https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Ubuntu_Installation
+
* [[Suricata]]
 +
* [[Suricata (software)]]
 +
* [[Suricata: Instalasi di Ubuntu]]
 +
* [[Suricata: Instalasi di Ubuntu 18.04]]
 +
* [[Suricata: Konfigurasi Minimal Ubuntu 18.04]]
 +
* [[Suricata: Test DDoS Attack]]
 +
* [[Suricata: Konfigurasi Dasar]]
 +
* [[Suricata: Manajemen Rule dengan Oinkmaster]]
 +
* [[Suricata: Instalasi Snorby & barnyard2]]

Latest revision as of 10:41, 30 March 2020

Sebelum menginstalasi Suricata, kita perlu menginstalasi aplikasi pendukung 

sudo apt-get -y install libpcre3 libpcre3-dbg libpcre3-dev \
build-essential autoconf automake libtool libpcap-dev libnet1-dev \
libyaml-0-2 libyaml-dev zlib1g zlib1g-dev libcap-ng-dev libcap-ng0 \
make libmagic-dev libjansson-dev libjansson4

HTP / LibHTP adalah HTTP parser yang mengerti security jaringan. HTP di bundel dalam Suricata dan di instalasi secara automatis.

IPS (Instrution Prevention System). Secara default, Suricata akan bekerja sebagai IDS. Jika anda ingin menggunakan Suricata sebagai IDS dan IPS, masukan perintah 

sudo apt-get -y install libnetfilter-queue-dev libnetfilter-queue1 libnfnetlink-dev libnfnetlink0

Download

Untuk men-download dan membuat Suricata, masukan perintah berikut: 

wget http://www.openinfosecfoundation.org/download/suricata-2.0.8.tar.gz
tar -xvzf suricata-2.0.8.tar.gz
cd suricata-2.0.8

Compile dan Install

Untuk IPS, masukan perintah 

./configure --enable-nfqueue --prefix=/usr --sysconfdir=/etc --localstatedir=/var

Untuk IDS (default), masukan perintah 

./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var

Lanjutkan dengan perintah 

./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var
make
sudo make install
sudo ldconfig

Auto setup

Kita dapat menggunakan fitur auto setup Suricata :

contoh: 

./configure && make && make install-conf
make install-conf

akan melakukan "make install" regular dan akan secara automatis meng-create/setup semua directory yang dibutuhkan di file suricata.yaml. 

./configure && make && make install-rules
make install-rules

akan melakukan "make install" regular dan akan secara automatis men-download dan men-setup ruleset terbaru dari Suricata. 

./configure && make && make install-full
make install-full

akan menjalankan semua yang disebut di atas (install-conf dan install-rules) - dan akan memberikan kita sebuah sistem Suricata yang siap di jalankan.



Referensi


Pranala Menarik

Retrieved from "https://onnocenter.or.id/wiki/index.php?title=Suricata:_Instalasi_di_Ubuntu&oldid=60608"