Index

255

Intrusion related signatures/anomalies, 5

man syslog.conf

, 82

IP filter based firewalls, 210

man tcpdump 

command, 65

IP packet header, and signatures, 7

Maximum Transfer Unit (MTU), 13, 97

ipopts 

keyword, 100 101

 m command line option, 115

ip_proto 

keyword, 101 102

 M command line option, 55

iptables, 218

memcap argument, stream4module, 137

itype 

keyword, 98 99

metric argument, 

tag 

keyword, 110

J

Microsoft SQL server, 25

JPGRAPH, 198

Microsoft Windows, 24 25

Miscellaneous tools, 209 219

K

ACID Web console, 217 218

keepstats argument, stream4module, 136

blocking access to the Web server on 

Key parameter, XML module, 146

the firewall, 218

L

iptables, 218

using a private network, 217

 l command, 15

Easy IDS, 218 219

 l command line option, 114

IDS policy manager, 212 217

Levels of trust, 10

SnortSam, 210 212

Libnet, 73

misc.rules 

file, 104

Libpcap, 73

Monitoring IDS, 11

Linksys home routers, 7

More Fragments Bit (MF), 97

local.rules 

files, 127

MRTG, 69

Log action, 82

msg 

keyword, 103

Log files, 57

myrules.rules

, 118

Log null output module, 155

MySQL, 21, 23 24, 25, 150, 161, 176

Log rules, 119

basic commands, 230 234

logdir directive, 114

creating user and granting permis 

Logging and alerting system, 15 16

sions/setting password, 163 164

Logs, 7

database:

log_tcpdump output module, 144 145

connecting to, 231

creating, 230

logto 

keyword, 102 103

switching from one database to an 

Loose Source Routing (lsrr), 101, 173

other, 233

Lower boundaries, port numbers, 87

database storage files, 227 230

M

databases 

command, 230 231

make check 

command, 36

getting started with, 223 236

grant 

command, 234

make 

command, 35, 56

installing, 161

make install 

command, 33, 35, 56

libraries, 161

man ping 

command, 46

list of databases, displaying, 230 231

man socket 

command, 68

mysqladmin 

utility, 234 236

man syslog 

command, 69, 82

mysqld

, 224