Difference between revisions of "Suricata: Instalasi di Ubuntu 22.04"

From OnnoWiki
Jump to navigation Jump to search
Line 20: Line 20:
  
 
Sebaiknya di baca2 isi file2 di /etc/suricata/rules/
 
Sebaiknya di baca2 isi file2 di /etc/suricata/rules/
 +
 +
 +
==Perbaikan konfigurasi==
 +
 +
Edit
 +
 +
vi /etc/suricata/suricata.yaml
 +
 +
Pastikan
 +
 +
# Linux high speed capture support
 +
af-packet:
 +
  - interface: enp0s3
 +
  
  
Line 27: Line 41:
 
  /etc/init.d/suricata start
 
  /etc/init.d/suricata start
 
  /etc/init.d/suricata stop
 
  /etc/init.d/suricata stop
 +
 +
 +
==Cek==
 +
 +
/usr/bin/suricata --af-packet -c /etc/suricata/suricata.yaml --pidfile /run/suricata.pid
 +
 +
/usr/bin/suricata -D --af-packet -c /etc/suricata/suricata.yaml --pidfile /run/suricata.pid
  
 
==Referensi==
 
==Referensi==

Revision as of 16:28, 7 July 2023

Sumber: https://kifarunix.com/install-and-setup-suricata-on-ubuntu-18-04/

Update Repo dan Install

Update

sudo apt update

Instalasi normal,

sudo apt -y install suricata

Instalasi dengan fasilitas debugging di enabled,

sudo apt -y install suricata-dbg

Selesai sudah,

  • Suricata rules berada di /etc/suricata/rules/
  • File konfigurasi di /etc/suricata/suricata.yaml.

Sebaiknya di baca2 isi file2 di /etc/suricata/rules/


Perbaikan konfigurasi

Edit

vi /etc/suricata/suricata.yaml

Pastikan

# Linux high speed capture support
af-packet:
  - interface: enp0s3


Start Restart Stop

/etc/init.d/suricata restart
/etc/init.d/suricata start
/etc/init.d/suricata stop


Cek

/usr/bin/suricata --af-packet -c /etc/suricata/suricata.yaml --pidfile /run/suricata.pid
/usr/bin/suricata -D --af-packet -c /etc/suricata/suricata.yaml --pidfile /run/suricata.pid

Referensi

Pranala Menarik