snort+acid打造LINUX下的入侵检测系统(IDS)(下)(2) SnortCenter DB $DB_host = "localhost"; # $DB_host : host on which the DB is stored $DB_user = "root"; # $DB_user : login to the database w ith this user $DB_password = "123456"; # $DB_password : password of the DB user $DB_port = ""; # $DB_port : port on which to access the DB (blank is default) (数据库密码改成你自己的) # 修改好后,保存退出。 # 然后创建snortcenter的数据库 # mysql -uroot -p123456 # create database snortcenter; # quit; # 在浏览器上键入http://192.168.0.11/sc,它会自动创建数据表,然后再次登入会让你输入用户名和密码,初始是admin,change.
# 然后我们安装snortcenter-agent-v1.0-RC1.tar.gz # cp snortcenter-agent-v1.0-RC1.tar.gz /opt # cd /opt # tar zxvf snortcenter-agent-v1.0-RC1.tar.gz # cd sensor # ./setup.sh,回答几个问题即完成安装,默认端口2525。 # cp /etc/snort.conf /etc/snort.eth0.conf # 具体如图: # 如要卸载到/etc/snort/目录下,有一个uninstall文件,./uninstall即可卸载。