Installation and Verification of Snort
The "Installation and Verification of Snort" module provide you with the instructions and devices to develop your hands-on skills in the following topics: Installation of Assistance Programs, Configuring Snort, Snort Verification and Results.
The Installation and Verification of Snort module provide you with the instructions and devices to develop your hands-on skills in the following topics.
- Installation of Assistance Programs
- Configuring Snort
- Snort Verification and Results
Lab time: It will take approximately 1 hour and 30 minutes to complete this lab.
The following exam objectives are covered in this lab:
- Conduct logging and monitoring activities
- Conduct incident management
- Operate and maintain preventative measures
Exercise 1 - Installation of Assistance Programs
There are a few programs which will be of great assistance to our installation. Notepad++ helps to list and number the lines for editing in notepad files. There will be a large amount of edits required, so clarity is key to completing this task efficiently. 7Zip will be used to open up and decompress zip files related to snort.
Exercise 2 - Configuring Snort
Snort configurations can be complicated; there are a lot of rules to be considered and many more which can be manually programmed into the tool. Snort will then measure traffic against those rules and so longing as they have been configured correctly, snort will alert the user to problems occurring by providing an on-the-fly alert system.
Additionally, don’t copy and paste! As appealing as it is, you are in fact copying invisible characters to those spaces which the program will read and eject an error.
Exercise 3 - Snort Verification and Results
This is very complicated setup but critical to understanding an IDS system which in turn is critical to security. Take your Time!! Look for any errors which have been output by snort.
Check very carefully the syntax used in the snort.conf file and that you have written everything clearly, using the write characters and spaces.
Also be careful inputting the commands into the windows CMD, incorrect characters here can cause errors.