Installing Snort

45

    38  echo

    39  echo "###############################################################"

    40  echo "The script generates three alerts in file /var/log/snort/alert"

    41  echo "Each alert should start with message like the following:"

    42  echo

    43  echo "      \"ATTACK RESPONSES id check returned root\" "

    44  echo "###############################################################"

    45  echo

    46  echo "Enter IP address of any other host on this network. If you"

    47  echo "don t know any IP address, just hit Enter key. By default"

    48  echo  n "broacast packets are used [255.255.255.255] : "

    49

    50  read ADDRESS

    51

    52  if [  z $ADDRESS ]

    53  then

    54     ADDRESS="255.255.255.255"

    55  fi

    56

    57  echo

    58  echo "Now generating alerts. If it takes more than 5 seconds, break"

    59  echo "the script by pressing Ctrl C. Probably you entered wrong IP"

    60  echo "address. Run the script again and don t enter any IP address"

    61

    62  ping  i 0.3  n  r  b $ADDRESS  p "7569643d3028726f6f74290a"  c3 2>/dev/

null >/dev/null

    63

    64  if [ $?  ne 0 ]

    65  then

    66     echo "Alerting generation failed."

    67     echo "Aborting ..."

    68     exit 1

    69  else

    70     echo

    71     echo "Alert generation complete"

    72     echo

    73  fi

    74

    75  sleep 2

    76

    77

    78  echo

    79  echo "################################################################"

    80  echo "Last 18 lines of /var/log/snort/alert file will be displayed now"

    81  echo "If snort is working properly, you will see recently generated"

    82  echo "alerts with current time"

    83  echo "################################################################"

    84  echo

    85  echo "Hit Enter key to continue ..."

    86  read ENTER

    87

    88  if [ !  f /var/log/snort/alert ]