New rules 1. Add two new rules to the local.rules file in the /etc/snort/rules directory. 2. Create a new rule to alert on outgoing web requests to the Brooklyn College website, with a custom message of your choice. 3. Create a new rule to alert on any incoming or outgoing ICMP traffic, again with a custom message. 4. You can test the configuration again. If this is not successful, recheck the syntax of the rules. 5. To run Snort and have the alerts display in the terminal window, type the following. (but replace with the interface name on your computer) sudo snort -A console -i -u snort - g snort -c /etc/snort/snort.conf -- this should start Snort. If you see "Commencing packet processing", Snort is waiting for traffic. 6. Create traffic to trigger the Brooklyn College rule and the ICMP rule. You should see alerts display in the terminal window running Snort.

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Question

Please do this is in SEEDUbuntu and provide screen shots! Only 2 rules(NOT 4) for alert need to be created if question is confusing. Thank You!

New rules
1. Add two new rules to the local.rules file in the /etc/snort/rules directory.
2. Create a new rule to alert on outgoing web requests to the Brooklyn College website, with a custom
message of your choice.
3. Create a new rule to alert on any incoming or outgoing ICMP traffic, again with a custom message.
4. You can test the configuration again. If this is not successful, recheck the syntax of the rules.
5. To run Snort and have the alerts display in the terminal window, type the following, (but replace
<interface> with the interface name on your computer) sudo snort -A console -i <interface> -u snort -
g snort -c /etc/snort/snort.conf -- this should start Snort. If you see "Commencing packet
processing", Snort is waiting for traffic.
6. Create traffic to trigger the Brooklyn College rule and the ICMP rule. You should see alerts display in
the terminal window running Snort.
Transcribed Image Text:New rules 1. Add two new rules to the local.rules file in the /etc/snort/rules directory. 2. Create a new rule to alert on outgoing web requests to the Brooklyn College website, with a custom message of your choice. 3. Create a new rule to alert on any incoming or outgoing ICMP traffic, again with a custom message. 4. You can test the configuration again. If this is not successful, recheck the syntax of the rules. 5. To run Snort and have the alerts display in the terminal window, type the following, (but replace <interface> with the interface name on your computer) sudo snort -A console -i <interface> -u snort - g snort -c /etc/snort/snort.conf -- this should start Snort. If you see "Commencing packet processing", Snort is waiting for traffic. 6. Create traffic to trigger the Brooklyn College rule and the ICMP rule. You should see alerts display in the terminal window running Snort.
Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 2 steps with 2 images

Blurred answer
Knowledge Booster
Hyperlinks
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
  • SEE MORE QUESTIONS
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education