256

Index

permission, granting, 234

Netscreen, 1 2, 21, 210

server configuration file, 227

Network intrusion detection mode, 65 66

Snort compilations with MySQL support, 

Network intrusion detection system (NIDS), 

161

2, 4, 6, 14, 58, 65 66

Snort database:

Network sniffer mode, 58 65

creating, 161 163

New action types, defining, 117

creating tables in, 164 170

NIDS, 6

extra tables

logging to, 172 173

Nmap, 2, 21, 129, 134, 156

maintenance, 175 176

No alert mode, 69

sample entries in database tables, 

noalerts argument, to stream4_reassembly 

168 170

preprocessor, 137

snort.conf configuration file, modifying, 

nocase 

keyword, 94, 103

170 171

noinspect argument, stream4module, 136

starting, 224 226

nolog directive, 115

starting Snort with the database support, 

no_promote directive, 115

171 172

no_stream option, 

flow 

keyword, 109

stopping, 224 226

NULL port scanning method, 135

Stunnel, 159, 174

table information, displaying, 232

O

tables:

obfuscate directive, 115

adding data to, 232

 O command line option, 115

creating, 231 232

Offset field, TCP packet header, 240

deleting data from, 233

offset 

keyword, 94

displaying data in, 233

Oinkmaster, 122 125, 129

listing, 232

oinkmaster.conf

, 125

testdb 

command, 230

Open Database Connectivity (ODBC), 157

user:

FAQ, 157

fn

, 176

creating, 233 234

project, 176

setting a password for, 234

using Snort with, 157 176

Open Source firewalls, 1 2

basic steps for, 160 173

OpenNMS, 23, 69, 83, 129

web site, 223

Operation or Opcode field, ARP packet head 

MySqL database, 2 4

er, 242

/opt/snort 1.9.0 

directory, 30 31

mysqladmin 

utility, 234 236

configure 

script, 31

N

directories contents, 31

 n command line option, 115

/opt/snort/bin 

directory, 36 37

 N command line option, 115

/opt/snort/bin/snort  dev

, 61 63

 n 1 

command line option, 67

/opt/snort/etc 

directory, 37 38, 56, 65

Nessus, 2, 21

/opt/snort/etc/snort.conf

, 65

Netfilter, 21

/opt/snort/rules

, 56

Netfilter/Iptables, 2

/opt/snort/rules 

directory, 38, 57