Security Onion Check

Aus xinux.net
Zur Navigation springen Zur Suche springen

sudo

  • sudo -i

ufw

status

  • ufw status

disable

  • ufw disable

reboot

  • shutdown -r now


nsm

nsm status

  • sudo service nsm status

Security-onion-nsm-1.png

Test on snort

  • sudo cat /etc/nsm/rules/local.rules
alert icmp any any -> $HOME_NET any (msg:"ICMP test detected"; GID:1; sid:10000001; rev:001; classtype:icmp-event;)

nsm restart

  • sudo service nsm restart

Security-onion-nsm-2.png

Abgerufen von „https://xinux.net/index.php?title=Security_Onion_Check&oldid=10432“