From the course: Protecting Your Network with Open Source Software

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Snort as a packet sniffer

Snort as a packet sniffer

From the course: Protecting Your Network with Open Source Software

Start my 1-month free trial

Snort as a packet sniffer

“

- [Instructor] Although, Snort is an intrusion detection and prevention systems solution, it can also be used as a basic packet sniffer. let's start by first installing Snort. Type sudo, space, apt, get, install, space, snort. Press Enter. Type Y and press Enter. The address range for the local network is 10 dot, zero dot, zero dot, zero, forward slash 24. Forward slash 24, indicates that, 10 dot zero dot zero is the subnet ID for the network to monitor. Press Tab to select OK and press Enter. Now, we have our snort instance installed successfully. To start capturing packets type sudo, space, snort, space, dash i standing for interface. Which interface do we use to sniff the packets here? We'll be using it is zero, which is the first network interface of the Ubuntu router host. Space, E-T-H zero. Space dash L and then the location where the packets are going to be locked. Here, dash L stands for logging. We'll be…

Contents