kamal paul – Page 2

Installing NXLOG agent on CentOS-8

By kamal paul February 22, 2023March 7, 2023 by kamal paul

Installing NXLOG Configuring Nagios starts with installing the NXLOG enterprise agent in the snort server and configuring it to pull out the logs from the snort server to the Nagios Log server. NXlog enterprise edition can be downloaded directly from the Nagios NXlog website. Download the executable into the appropriate directory and then perform the below steps to install it. 1. Extract the contents of the archive #tar -xf nxlog-v5.6.7727_rhel7.x86_64.tar.bz2 2. Step 2 requires changing…

Defensive

Configuring Snort 2 on Windows 10

By kamal paul February 21, 2023March 7, 2023 by kamal paul

If you haven’t read the first part of this series, I would greatly recommend to check it out. Configuring the snort completely lies in changing the configuration setting in the snort.conf file. The configuration file is excellently documented and very easy to use. The default location of snort.conf file is ‘C:\Snort\etc’. ‘etc’ folder contains all configuration files. The configuration file is plain text and you can use any text editor to edit it, but recommend…

Defensive

Snort 3 installation on CentOS

By kamal paul February 21, 2023March 7, 2023 by kamal paul

Download CentOS 8 Stream- http://isoredirect.centos.org/centos/8-stream/isos/x86_64/ Download LibDAQ- https://github.com/snort3/libdaq The following dependencies are mandatory for installing snort- dnet, pcap, pcre, openssl, zlib, pkgconfig,LuaJIT,hwloc, LibDAQ, libmnl. Preparation Building snort on Centos requires several development libraries which are not present in the default repositories- AppStream, Base or Extra. Instead, these libraries exist in the PowerTools repository, which is disabled by default. Hence, the PowerTools repository is enabled first. # dnf config-manager –add-repo /etc/yum.repos.d/ CentOS-Stream-PowerTools.repo # dnf config-manager –set-enabled…

Uncategorized

Snort installation on Windows 10

By kamal paul January 8, 2023March 7, 2023 by kamal paul

This post describes installing snort-2.9.20 on Windows 10 Enterprise. Download the executables from the below url’s. Snort download- https://www.snort.org/downloads/snort/Snort_2_9_20_Installer.x64.exe Npcap download- https://npcap.com/dist/npcap-1.72.exe 1.Installing snort first requires you to install Npcap in administrator mode. Go to the folder where the Npcap executable is placed and right-click the executable and select the option ‘Run as administrator’. 2. The License Agreement window appears. Click ‘I Agree’ to continue 3. In the next window it shows Installation options. Tick…